./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 09:51:04,248 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 09:51:04,249 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 09:51:04,266 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 09:51:04,268 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 09:51:04,271 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 09:51:04,273 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 09:51:04,274 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 09:51:04,275 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 09:51:04,278 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 09:51:04,279 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 09:51:04,281 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 09:51:04,281 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 09:51:04,283 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 09:51:04,285 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 09:51:04,287 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 09:51:04,288 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 09:51:04,289 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 09:51:04,291 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 09:51:04,293 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 09:51:04,295 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 09:51:04,296 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 09:51:04,297 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 09:51:04,297 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 09:51:04,301 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 09:51:04,301 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 09:51:04,301 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 09:51:04,302 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 09:51:04,302 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 09:51:04,302 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 09:51:04,303 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 09:51:04,303 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 09:51:04,303 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 09:51:04,304 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 09:51:04,304 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 09:51:04,304 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 09:51:04,305 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 09:51:04,305 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 09:51:04,305 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 09:51:04,305 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 09:51:04,306 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 09:51:04,308 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-16 09:51:04,322 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 09:51:04,327 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 09:51:04,327 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 09:51:04,327 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 09:51:04,332 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 09:51:04,333 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 09:51:04,333 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 09:51:04,333 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-16 09:51:04,333 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-16 09:51:04,333 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-16 09:51:04,334 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-16 09:51:04,334 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-16 09:51:04,334 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-16 09:51:04,334 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 09:51:04,335 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-16 09:51:04,336 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 09:51:04,337 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-16 09:51:04,337 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 09:51:04,337 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 09:51:04,337 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 09:51:04,337 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 09:51:04,338 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 09:51:04,338 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-16 09:51:04,339 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> a24bdc0807d94f83606acfe112db107808ae7409e0ad1ecc1d01e9704d0b4ece [2021-12-16 09:51:04,510 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 09:51:04,529 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 09:51:04,531 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 09:51:04,532 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 09:51:04,533 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 09:51:04,534 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2021-12-16 09:51:04,595 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d0402953c/ac162556c63a45e983e9a2532699c9f1/FLAG42cb036be [2021-12-16 09:51:05,070 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 09:51:05,070 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c [2021-12-16 09:51:05,100 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d0402953c/ac162556c63a45e983e9a2532699c9f1/FLAG42cb036be [2021-12-16 09:51:05,606 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/d0402953c/ac162556c63a45e983e9a2532699c9f1 [2021-12-16 09:51:05,609 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 09:51:05,610 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 09:51:05,613 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 09:51:05,613 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 09:51:05,615 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 09:51:05,616 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 09:51:05" (1/1) ... [2021-12-16 09:51:05,616 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7006dfb2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:05, skipping insertion in model container [2021-12-16 09:51:05,617 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 09:51:05" (1/1) ... [2021-12-16 09:51:05,621 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 09:51:05,678 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 09:51:05,809 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c[1545,1558] [2021-12-16 09:51:05,948 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 09:51:05,955 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 09:51:05,963 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec1_product01.cil.c[1545,1558] [2021-12-16 09:51:06,014 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 09:51:06,032 INFO L208 MainTranslator]: Completed translation [2021-12-16 09:51:06,033 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06 WrapperNode [2021-12-16 09:51:06,033 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 09:51:06,034 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 09:51:06,034 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 09:51:06,034 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 09:51:06,039 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,061 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,173 INFO L137 Inliner]: procedures = 88, calls = 329, calls flagged for inlining = 182, calls inlined = 222, statements flattened = 7528 [2021-12-16 09:51:06,173 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 09:51:06,174 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 09:51:06,174 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 09:51:06,174 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 09:51:06,180 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,180 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,191 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,191 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,265 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,313 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,324 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,342 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 09:51:06,343 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 09:51:06,344 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 09:51:06,344 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 09:51:06,345 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (1/1) ... [2021-12-16 09:51:06,350 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:51:06,357 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:51:06,369 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:51:06,377 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-16 09:51:06,396 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 09:51:06,396 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 09:51:06,396 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 09:51:06,397 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 09:51:06,527 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 09:51:06,528 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 09:51:08,899 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 09:51:08,914 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 09:51:08,914 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-16 09:51:08,917 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 09:51:08 BoogieIcfgContainer [2021-12-16 09:51:08,917 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 09:51:08,918 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-16 09:51:08,918 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-16 09:51:08,920 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-16 09:51:08,921 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:51:08,921 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 16.12 09:51:05" (1/3) ... [2021-12-16 09:51:08,922 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@34cbf531 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.12 09:51:08, skipping insertion in model container [2021-12-16 09:51:08,922 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:51:08,922 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:51:06" (2/3) ... [2021-12-16 09:51:08,922 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@34cbf531 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.12 09:51:08, skipping insertion in model container [2021-12-16 09:51:08,922 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:51:08,923 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 09:51:08" (3/3) ... [2021-12-16 09:51:08,923 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product01.cil.c [2021-12-16 09:51:08,950 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-16 09:51:08,950 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-16 09:51:08,950 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-16 09:51:08,950 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-16 09:51:08,951 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-16 09:51:08,951 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-16 09:51:08,951 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-16 09:51:08,951 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-16 09:51:09,008 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2270 states, 2269 states have (on average 1.878801234023799) internal successors, (4263), 2269 states have internal predecessors, (4263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:09,084 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2021-12-16 09:51:09,087 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:09,087 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:09,103 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,104 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,104 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-16 09:51:09,110 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2270 states, 2269 states have (on average 1.878801234023799) internal successors, (4263), 2269 states have internal predecessors, (4263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:09,131 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1087 [2021-12-16 09:51:09,131 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:09,131 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:09,137 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,137 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,150 INFO L791 eck$LassoCheckResult]: Stem: 537#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2192#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1254#L3127true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1893#L3120true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 678#L3135true main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 407#L1836true assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 439#L1805true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 688#L3154true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 704#L3030true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 891#L3055true bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2195#L2208true assume 0 == initPersonOnFloor_~floor#1; 2035#L2209true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 337#L2316-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1028#L3161true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2056#L3173-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1655#L2000true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 365#L2012-2true assume { :end_inline_callOnFloor } true; 1325#L2352true assume { :end_inline_initPersonOnFloor } true; 1700#L1610true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 194#L3030-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 2075#L3055-1true angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 302#L2208-1true assume 0 == initPersonOnFloor_~floor#1; 630#L2209-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2207#L2316-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 115#L3161-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 304#L3173-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 749#L2000-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 473#L2012-5true assume { :end_inline_callOnFloor } true; 987#L2352-1true assume { :end_inline_initPersonOnFloor } true; 1390#L1577true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 210#L1932true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 134#L1959true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 335#L885true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1004#L897true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 477#L1034true assume !(0 != timeShift_~tmp___9~2#1); 1530#L1125true assume !(1 == ~doorState~0); 71#L1125-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1452#L476true assume !(1 == stopRequestedInDirection_~dir#1); 1545#L645true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1892#L798true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 118#L1133true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 712#L852true assume !(1 == ~currentHeading~0); 1489#L862true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 123#L862-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 932#L868-1true assume { :end_inline_continueInDirection } true; 1268#L1142-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 608#L272true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1294#L3199true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 205#L3200true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1291#L281true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 137#L3204true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 888#L3259true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1820#L1157true assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 233#L1637-2true [2021-12-16 09:51:09,152 INFO L793 eck$LassoCheckResult]: Loop: 233#L1637-2true assume !false; 190#L1638true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1586#L1641true assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 518#L143true cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1651#L1645true assume 1 != cleanup_~tmp___0~6#1; 1126#L1645-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 547#L1932-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1027#L1959-21true anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 226#L380true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 2115#L444true isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 159#L457true cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1792#L1657true assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 92#L1932-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1920#L1959-26true stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 550#L885-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 2127#L897-1true timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1901#L1034-2true assume !(0 != timeShift_~tmp___9~2#1); 1694#L1125-3true assume 1 == ~doorState~0;~doorState~0 := 0; 825#L1125-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1598#L476-2true assume !(1 == stopRequestedInDirection_~dir#1); 203#L645-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 2166#L798-2true timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 542#L1133-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 581#L852-3true assume !(1 == ~currentHeading~0); 262#L862-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1934#L862-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1914#L868-7true assume { :end_inline_continueInDirection } true; 965#L1142-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1547#L272-1true __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1039#L3199-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2058#L3200-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 253#L281-5true __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1832#L3204-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 2084#L3259-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1453#L1157-1true assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 233#L1637-2true [2021-12-16 09:51:09,159 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:09,164 INFO L85 PathProgramCache]: Analyzing trace with hash -1122916155, now seen corresponding path program 1 times [2021-12-16 09:51:09,176 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:09,177 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [315199911] [2021-12-16 09:51:09,177 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:09,178 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:09,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:09,360 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:09,361 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:09,361 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [315199911] [2021-12-16 09:51:09,362 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [315199911] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:09,362 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:09,362 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:09,364 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82986534] [2021-12-16 09:51:09,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:09,367 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:09,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:09,368 INFO L85 PathProgramCache]: Analyzing trace with hash -452256857, now seen corresponding path program 1 times [2021-12-16 09:51:09,368 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:09,368 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [152097413] [2021-12-16 09:51:09,369 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:09,369 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:09,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:09,402 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:09,402 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:09,403 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [152097413] [2021-12-16 09:51:09,403 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [152097413] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:09,403 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:09,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:09,403 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [714165016] [2021-12-16 09:51:09,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:09,404 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:09,405 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:09,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:09,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:09,430 INFO L87 Difference]: Start difference. First operand has 2270 states, 2269 states have (on average 1.878801234023799) internal successors, (4263), 2269 states have internal predecessors, (4263), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 4 states, 4 states have (on average 8.75) internal successors, (35), 4 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:09,721 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:09,721 INFO L93 Difference]: Finished difference Result 3366 states and 6226 transitions. [2021-12-16 09:51:09,722 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:09,729 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3366 states and 6226 transitions. [2021-12-16 09:51:09,753 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2066 [2021-12-16 09:51:09,804 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3366 states to 3294 states and 6145 transitions. [2021-12-16 09:51:09,805 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3294 [2021-12-16 09:51:09,810 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3294 [2021-12-16 09:51:09,811 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3294 states and 6145 transitions. [2021-12-16 09:51:09,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:09,818 INFO L681 BuchiCegarLoop]: Abstraction has 3294 states and 6145 transitions. [2021-12-16 09:51:09,833 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3294 states and 6145 transitions. [2021-12-16 09:51:09,873 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3294 to 2251. [2021-12-16 09:51:09,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2251 states, 2251 states have (on average 1.8809418036428254) internal successors, (4234), 2250 states have internal predecessors, (4234), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:09,883 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2251 states to 2251 states and 4234 transitions. [2021-12-16 09:51:09,884 INFO L704 BuchiCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2021-12-16 09:51:09,884 INFO L587 BuchiCegarLoop]: Abstraction has 2251 states and 4234 transitions. [2021-12-16 09:51:09,884 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-16 09:51:09,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2251 states and 4234 transitions. [2021-12-16 09:51:09,893 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1089 [2021-12-16 09:51:09,893 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:09,893 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:09,895 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,895 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:09,895 INFO L791 eck$LassoCheckResult]: Stem: 6689#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6690#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 7508#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7509#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 6882#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 6476#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 6477#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6526#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 6898#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 6544#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7159#L2208 assume 0 == initPersonOnFloor_~floor#1; 7877#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5812#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6351#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 7303#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7740#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6406#L2012-2 assume { :end_inline_callOnFloor } true; 6407#L2352 assume { :end_inline_initPersonOnFloor } true; 7544#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 6083#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 5720#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6286#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 6287#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5897#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 5915#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 5916#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6292#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6583#L2012-5 assume { :end_inline_callOnFloor } true; 6584#L2352-1 assume { :end_inline_initPersonOnFloor } true; 7262#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 6115#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 5822#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 5960#L885 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 6347#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 6589#L1034 assume !(0 != timeShift_~tmp___9~2#1); 6590#L1125 assume !(1 == ~doorState~0); 5813#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5814#L476 assume !(1 == stopRequestedInDirection_~dir#1); 7637#L645 assume !(0 == ~currentFloorID~0); 7079#L651 assume !(~currentFloorID~0 > 0); 7081#L666 assume ~currentFloorID~0 > 0; 7144#L668 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 7145#L669 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 5776#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 7900#L1133 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 6931#L852 assume !(1 == ~currentHeading~0); 6933#L862 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5935#L862-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5936#L868-1 assume { :end_inline_continueInDirection } true; 6478#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6787#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 6788#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 6105#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 6106#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 5966#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 5967#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7156#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 6157#L1637-2 [2021-12-16 09:51:09,896 INFO L793 eck$LassoCheckResult]: Loop: 6157#L1637-2 assume !false; 6077#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6078#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 6658#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 6659#L1645 assume 1 != cleanup_~tmp___0~6#1; 7402#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 6706#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 6707#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 6147#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 5949#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 6012#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 6013#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 5866#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 5737#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 6712#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 6713#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 7843#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 7758#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7077#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7078#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 6102#L645-2 assume !(0 == ~currentFloorID~0); 6103#L651-2 assume !(~currentFloorID~0 > 0); 7425#L666-2 assume ~currentFloorID~0 > 0; 7790#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 7643#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 5883#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 7899#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 6755#L852-3 assume !(1 == ~currentHeading~0); 6217#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6218#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7845#L868-7 assume { :end_inline_continueInDirection } true; 7237#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 7238#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 7312#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 7313#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 6196#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 6197#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 6068#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7638#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 6157#L1637-2 [2021-12-16 09:51:09,896 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:09,896 INFO L85 PathProgramCache]: Analyzing trace with hash 1954358830, now seen corresponding path program 1 times [2021-12-16 09:51:09,897 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:09,897 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1094817153] [2021-12-16 09:51:09,897 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:09,897 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:09,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:09,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:09,935 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:09,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1094817153] [2021-12-16 09:51:09,935 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1094817153] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:09,935 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:09,936 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:09,936 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1482971077] [2021-12-16 09:51:09,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:09,936 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:09,937 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:09,937 INFO L85 PathProgramCache]: Analyzing trace with hash 797825808, now seen corresponding path program 1 times [2021-12-16 09:51:09,937 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:09,937 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1646180347] [2021-12-16 09:51:09,937 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:09,937 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:09,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:09,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:09,960 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:09,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1646180347] [2021-12-16 09:51:09,961 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1646180347] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:09,961 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:09,961 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:09,961 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [884252861] [2021-12-16 09:51:09,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:09,962 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:09,962 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:09,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:09,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:09,962 INFO L87 Difference]: Start difference. First operand 2251 states and 4234 transitions. cyclomatic complexity: 1984 Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 4 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:10,752 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:10,752 INFO L93 Difference]: Finished difference Result 3409 states and 6274 transitions. [2021-12-16 09:51:10,753 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:10,753 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 3409 states and 6274 transitions. [2021-12-16 09:51:10,770 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2282 [2021-12-16 09:51:10,786 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 3409 states to 3409 states and 6274 transitions. [2021-12-16 09:51:10,786 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3409 [2021-12-16 09:51:10,789 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3409 [2021-12-16 09:51:10,789 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3409 states and 6274 transitions. [2021-12-16 09:51:10,793 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:10,793 INFO L681 BuchiCegarLoop]: Abstraction has 3409 states and 6274 transitions. [2021-12-16 09:51:10,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3409 states and 6274 transitions. [2021-12-16 09:51:10,821 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3409 to 3060. [2021-12-16 09:51:10,826 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3060 states, 3060 states have (on average 1.8591503267973857) internal successors, (5689), 3059 states have internal predecessors, (5689), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:10,833 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3060 states to 3060 states and 5689 transitions. [2021-12-16 09:51:10,834 INFO L704 BuchiCegarLoop]: Abstraction has 3060 states and 5689 transitions. [2021-12-16 09:51:10,834 INFO L587 BuchiCegarLoop]: Abstraction has 3060 states and 5689 transitions. [2021-12-16 09:51:10,834 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-16 09:51:10,834 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3060 states and 5689 transitions. [2021-12-16 09:51:10,845 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2018 [2021-12-16 09:51:10,845 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:10,845 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:10,847 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:10,847 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:10,847 INFO L791 eck$LassoCheckResult]: Stem: 12288#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 12289#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 13074#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 13075#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 12476#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 12091#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 12092#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 12132#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 12491#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 12150#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 12732#L2208 assume 0 == initPersonOnFloor_~floor#1; 13440#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11472#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11977#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 12871#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 13301#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 12027#L2012-2 assume { :end_inline_callOnFloor } true; 12028#L2352 assume { :end_inline_initPersonOnFloor } true; 13110#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 11722#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 11389#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 11913#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 11914#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 11548#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 11568#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 11569#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 11919#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 12186#L2012-5 assume { :end_inline_callOnFloor } true; 12187#L2352-1 assume { :end_inline_initPersonOnFloor } true; 12834#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 11755#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 11610#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 11611#L885 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 11970#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 12192#L1034 assume !(0 != timeShift_~tmp___9~2#1); 12193#L1125 assume !(1 == ~doorState~0); 11473#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 11474#L476 assume !(1 == stopRequestedInDirection_~dir#1); 13201#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 12744#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 11571#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 11572#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 13421#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 13007#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 11563#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 11564#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 13427#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 11737#L852-2 assume !(1 == ~currentHeading~0); 11738#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11833#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 12610#L868-5 assume { :end_inline_continueInDirection } true; 12773#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 12380#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 12381#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 11742#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 11743#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 11614#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 11615#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 12729#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 11789#L1637-2 [2021-12-16 09:51:10,848 INFO L793 eck$LassoCheckResult]: Loop: 11789#L1637-2 assume !false; 11715#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 11716#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 12258#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 12259#L1645 assume 1 != cleanup_~tmp___0~6#1; 13298#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13492#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 12620#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 13501#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 13474#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 13473#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 13472#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 13471#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 13465#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 11403#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 13484#L885-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~2#1;stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 13483#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 13482#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 13481#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 13480#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 13478#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 13479#L645-2 assume !(0 == ~currentFloorID~0); 13462#L651-2 assume !(~currentFloorID~0 > 0); 12994#L666-2 assume ~currentFloorID~0 > 0; 13351#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 13207#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 11530#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 14320#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 14319#L852-3 assume !(1 == ~currentHeading~0); 14318#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 11845#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 13406#L868-7 assume { :end_inline_continueInDirection } true; 12810#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 12811#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 12879#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 12880#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 11826#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 11827#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 11709#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 13202#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 11789#L1637-2 [2021-12-16 09:51:10,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:10,849 INFO L85 PathProgramCache]: Analyzing trace with hash -712678158, now seen corresponding path program 1 times [2021-12-16 09:51:10,849 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:10,849 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [336646247] [2021-12-16 09:51:10,849 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:10,849 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:10,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:10,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:10,878 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:10,878 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [336646247] [2021-12-16 09:51:10,878 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [336646247] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:10,878 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:10,879 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:10,879 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007695123] [2021-12-16 09:51:10,879 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:10,879 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:10,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:10,880 INFO L85 PathProgramCache]: Analyzing trace with hash -1595111519, now seen corresponding path program 1 times [2021-12-16 09:51:10,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:10,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757903434] [2021-12-16 09:51:10,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:10,880 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:10,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:10,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:10,921 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:10,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757903434] [2021-12-16 09:51:10,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [757903434] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:10,921 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:10,921 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:10,921 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1046003773] [2021-12-16 09:51:10,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:10,922 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:10,922 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:10,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:10,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:10,923 INFO L87 Difference]: Start difference. First operand 3060 states and 5689 transitions. cyclomatic complexity: 2630 Second operand has 5 states, 5 states have (on average 8.0) internal successors, (40), 5 states have internal predecessors, (40), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:11,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:11,585 INFO L93 Difference]: Finished difference Result 5817 states and 10735 transitions. [2021-12-16 09:51:11,585 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 09:51:11,586 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 5817 states and 10735 transitions. [2021-12-16 09:51:11,611 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3931 [2021-12-16 09:51:11,636 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 5817 states to 5817 states and 10735 transitions. [2021-12-16 09:51:11,637 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 5817 [2021-12-16 09:51:11,642 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 5817 [2021-12-16 09:51:11,642 INFO L73 IsDeterministic]: Start isDeterministic. Operand 5817 states and 10735 transitions. [2021-12-16 09:51:11,649 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:11,649 INFO L681 BuchiCegarLoop]: Abstraction has 5817 states and 10735 transitions. [2021-12-16 09:51:11,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5817 states and 10735 transitions. [2021-12-16 09:51:11,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5817 to 3066. [2021-12-16 09:51:11,693 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3066 states, 3066 states have (on average 1.8444227005870841) internal successors, (5655), 3065 states have internal predecessors, (5655), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:11,699 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3066 states to 3066 states and 5655 transitions. [2021-12-16 09:51:11,699 INFO L704 BuchiCegarLoop]: Abstraction has 3066 states and 5655 transitions. [2021-12-16 09:51:11,699 INFO L587 BuchiCegarLoop]: Abstraction has 3066 states and 5655 transitions. [2021-12-16 09:51:11,699 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-16 09:51:11,699 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3066 states and 5655 transitions. [2021-12-16 09:51:11,706 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2022 [2021-12-16 09:51:11,706 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:11,706 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:11,708 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:11,708 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:11,709 INFO L791 eck$LassoCheckResult]: Stem: 21184#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 21185#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 21968#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 21969#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 21371#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 20989#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 20990#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 21029#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 21384#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 21048#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 21622#L2208 assume 0 == initPersonOnFloor_~floor#1; 22338#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 20369#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 20872#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 21765#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 22197#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 20925#L2012-2 assume { :end_inline_callOnFloor } true; 20926#L2352 assume { :end_inline_initPersonOnFloor } true; 22007#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 20620#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 20286#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 20811#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 20812#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 20442#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 20463#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 20464#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 20817#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 21085#L2012-5 assume { :end_inline_callOnFloor } true; 21086#L2352-1 assume { :end_inline_initPersonOnFloor } true; 21727#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 20654#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 20508#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 20509#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 20869#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 20916#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 21552#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 21553#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 21745#L1034 assume !(0 != timeShift_~tmp___9~2#1); 22145#L1125 assume !(1 == ~doorState~0); 20370#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 20371#L476 assume !(1 == stopRequestedInDirection_~dir#1); 22099#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 21635#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 20468#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 20469#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 22321#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 21902#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 20466#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 20467#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 22327#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 20635#L852-2 assume !(1 == ~currentHeading~0); 20636#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20734#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21500#L868-5 assume { :end_inline_continueInDirection } true; 21665#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 21276#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 21277#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 20640#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 20642#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 22503#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 22502#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 22501#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 22500#L1637-2 [2021-12-16 09:51:11,709 INFO L793 eck$LassoCheckResult]: Loop: 22500#L1637-2 assume !false; 22499#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 22498#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 22497#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 22496#L1645 assume 1 != cleanup_~tmp___0~6#1; 22495#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 22494#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 21510#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 20677#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 20494#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 20552#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 20553#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 22373#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 22364#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 20300#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 22386#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 22385#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 22380#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 22378#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 22377#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 22376#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 22375#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 22374#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 22371#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 22372#L645-2 assume !(0 == ~currentFloorID~0); 22359#L651-2 assume !(~currentFloorID~0 > 0); 21890#L666-2 assume ~currentFloorID~0 > 0; 22248#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 22105#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 20427#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 22389#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 22388#L852-3 assume !(1 == ~currentHeading~0); 22387#L862-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 20744#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 22306#L868-7 assume { :end_inline_continueInDirection } true; 21703#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 21704#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 21772#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 21773#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 20725#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 20726#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 20607#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 22348#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 22500#L1637-2 [2021-12-16 09:51:11,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:11,710 INFO L85 PathProgramCache]: Analyzing trace with hash -2094191695, now seen corresponding path program 1 times [2021-12-16 09:51:11,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:11,710 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [319998312] [2021-12-16 09:51:11,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:11,710 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:11,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:11,735 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:11,736 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:11,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [319998312] [2021-12-16 09:51:11,736 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [319998312] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:11,736 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:11,736 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:11,736 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [932154515] [2021-12-16 09:51:11,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:11,737 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:11,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:11,737 INFO L85 PathProgramCache]: Analyzing trace with hash 740938026, now seen corresponding path program 1 times [2021-12-16 09:51:11,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:11,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1865379258] [2021-12-16 09:51:11,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:11,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:11,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:11,766 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:11,767 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:11,767 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1865379258] [2021-12-16 09:51:11,767 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1865379258] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:11,767 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:11,767 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:11,767 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1764000813] [2021-12-16 09:51:11,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:11,768 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:11,768 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:11,768 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:11,768 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:11,768 INFO L87 Difference]: Start difference. First operand 3066 states and 5655 transitions. cyclomatic complexity: 2590 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:12,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:12,861 INFO L93 Difference]: Finished difference Result 6280 states and 11472 transitions. [2021-12-16 09:51:12,861 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 09:51:12,861 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 6280 states and 11472 transitions. [2021-12-16 09:51:12,890 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4184 [2021-12-16 09:51:12,918 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 6280 states to 6280 states and 11472 transitions. [2021-12-16 09:51:12,918 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 6280 [2021-12-16 09:51:12,924 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 6280 [2021-12-16 09:51:12,924 INFO L73 IsDeterministic]: Start isDeterministic. Operand 6280 states and 11472 transitions. [2021-12-16 09:51:12,932 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:12,932 INFO L681 BuchiCegarLoop]: Abstraction has 6280 states and 11472 transitions. [2021-12-16 09:51:12,936 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6280 states and 11472 transitions. [2021-12-16 09:51:12,980 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6280 to 3140. [2021-12-16 09:51:12,985 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3140 states, 3140 states have (on average 1.8372611464968154) internal successors, (5769), 3139 states have internal predecessors, (5769), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:12,991 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3140 states to 3140 states and 5769 transitions. [2021-12-16 09:51:12,992 INFO L704 BuchiCegarLoop]: Abstraction has 3140 states and 5769 transitions. [2021-12-16 09:51:12,992 INFO L587 BuchiCegarLoop]: Abstraction has 3140 states and 5769 transitions. [2021-12-16 09:51:12,992 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-16 09:51:12,992 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 3140 states and 5769 transitions. [2021-12-16 09:51:12,999 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2096 [2021-12-16 09:51:13,000 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:13,000 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:13,001 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:13,001 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:13,002 INFO L791 eck$LassoCheckResult]: Stem: 30548#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 30549#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 31328#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31329#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 30734#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 30354#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 30355#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 30394#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 30749#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 30413#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 30989#L2208 assume 0 == initPersonOnFloor_~floor#1; 31694#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 29736#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 30237#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 31130#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 31555#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 30287#L2012-2 assume { :end_inline_callOnFloor } true; 30288#L2352 assume { :end_inline_initPersonOnFloor } true; 31364#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 29985#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 29650#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 30176#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 30177#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 29809#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 29827#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 29828#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 30182#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 30449#L2012-5 assume { :end_inline_callOnFloor } true; 30450#L2352-1 assume { :end_inline_initPersonOnFloor } true; 31092#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 30016#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 29871#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 29872#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 30234#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 30281#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 30919#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 30920#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 31754#L1034 assume !(0 != timeShift_~tmp___9~2#1); 31502#L1125 assume !(1 == ~doorState~0); 29737#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 29738#L476 assume !(1 == stopRequestedInDirection_~dir#1); 31455#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 31001#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 29835#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 29836#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 31677#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 31262#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 29830#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 29831#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 31684#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 30001#L852-2 assume !(1 == ~currentHeading~0); 30002#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30099#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 30866#L868-5 assume { :end_inline_continueInDirection } true; 31032#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 32563#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 32562#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 32560#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 32561#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 32543#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 32542#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 31628#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 31457#L1637-2 [2021-12-16 09:51:13,002 INFO L793 eck$LassoCheckResult]: Loop: 31457#L1637-2 assume !false; 32501#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 32500#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 32499#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 32498#L1645 assume 1 != cleanup_~tmp___0~6#1; 32497#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 32496#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 30876#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 32527#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 32514#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 32512#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 32510#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 32502#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 29780#L1936-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 29667#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 31744#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 31743#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 31740#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 31738#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 31736#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 31735#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 31733#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 31732#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 31731#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 31729#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 31730#L645-2 assume !(0 == ~currentFloorID~0); 31719#L651-2 assume !(~currentFloorID~0 > 0); 31250#L666-2 assume ~currentFloorID~0 > 0; 31605#L668-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 31462#L669-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 29794#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 32621#L1133-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 30609#L852-3 assume !(1 == ~currentHeading~0); 30108#L862-9 assume !(0 == ~currentFloorID~0); 30109#L862-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 31661#L868-7 assume { :end_inline_continueInDirection } true; 31067#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 31068#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 31138#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 31139#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 30090#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 30091#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 29973#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 31456#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 31457#L1637-2 [2021-12-16 09:51:13,002 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:13,003 INFO L85 PathProgramCache]: Analyzing trace with hash -2094191695, now seen corresponding path program 2 times [2021-12-16 09:51:13,003 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:13,003 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1341941619] [2021-12-16 09:51:13,003 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:13,003 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:13,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:13,025 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:13,026 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:13,026 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1341941619] [2021-12-16 09:51:13,026 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1341941619] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:13,026 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:13,026 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:13,026 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1632858788] [2021-12-16 09:51:13,027 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:13,027 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:13,027 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:13,027 INFO L85 PathProgramCache]: Analyzing trace with hash -330281427, now seen corresponding path program 1 times [2021-12-16 09:51:13,027 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:13,028 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340170386] [2021-12-16 09:51:13,028 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:13,028 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:13,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:13,085 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:13,085 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:13,085 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340170386] [2021-12-16 09:51:13,085 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [340170386] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:13,086 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:13,086 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:13,086 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1290237889] [2021-12-16 09:51:13,086 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:13,086 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:13,086 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:13,087 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:13,087 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:13,087 INFO L87 Difference]: Start difference. First operand 3140 states and 5769 transitions. cyclomatic complexity: 2630 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:13,667 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:13,667 INFO L93 Difference]: Finished difference Result 4362 states and 7965 transitions. [2021-12-16 09:51:13,668 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 09:51:13,668 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4362 states and 7965 transitions. [2021-12-16 09:51:13,681 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3249 [2021-12-16 09:51:13,696 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4362 states to 4362 states and 7965 transitions. [2021-12-16 09:51:13,697 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4362 [2021-12-16 09:51:13,700 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4362 [2021-12-16 09:51:13,700 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4362 states and 7965 transitions. [2021-12-16 09:51:13,705 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:13,705 INFO L681 BuchiCegarLoop]: Abstraction has 4362 states and 7965 transitions. [2021-12-16 09:51:13,708 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4362 states and 7965 transitions. [2021-12-16 09:51:13,746 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4362 to 4087. [2021-12-16 09:51:13,751 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4087 states, 4087 states have (on average 1.8341081477856618) internal successors, (7496), 4086 states have internal predecessors, (7496), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:13,759 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4087 states to 4087 states and 7496 transitions. [2021-12-16 09:51:13,759 INFO L704 BuchiCegarLoop]: Abstraction has 4087 states and 7496 transitions. [2021-12-16 09:51:13,759 INFO L587 BuchiCegarLoop]: Abstraction has 4087 states and 7496 transitions. [2021-12-16 09:51:13,759 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-16 09:51:13,759 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4087 states and 7496 transitions. [2021-12-16 09:51:13,767 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3043 [2021-12-16 09:51:13,767 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:13,767 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:13,768 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:13,768 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:13,769 INFO L791 eck$LassoCheckResult]: Stem: 38068#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 38069#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 38878#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 38879#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 38264#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 37870#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 37871#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 37912#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 38279#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 37931#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 38521#L2208 assume 0 == initPersonOnFloor_~floor#1; 39278#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 37245#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 37751#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 38669#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 39121#L2000 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 37798#L2012-2 assume { :end_inline_callOnFloor } true; 37799#L2352 assume { :end_inline_initPersonOnFloor } true; 38914#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 37494#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 37160#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 37687#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 37688#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 37317#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 37335#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 37336#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 37693#L2000-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 37967#L2012-5 assume { :end_inline_callOnFloor } true; 37968#L2352-1 assume { :end_inline_initPersonOnFloor } true; 38629#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 37526#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 37380#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 37381#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 37745#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 37792#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 38449#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 38450#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 39355#L1034 assume !(0 != timeShift_~tmp___9~2#1); 39062#L1125 assume !(1 == ~doorState~0); 37246#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 37247#L476 assume !(1 == stopRequestedInDirection_~dir#1); 39011#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 38533#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 37343#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 37344#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 39257#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 38810#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 37338#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 37339#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 39264#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 37512#L852-2 assume !(1 == ~currentHeading~0); 37513#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 37611#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 38397#L868-5 assume { :end_inline_continueInDirection } true; 38564#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 39615#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 39612#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 39611#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 39610#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 39565#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 39547#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 39543#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 39539#L1637-2 [2021-12-16 09:51:13,769 INFO L793 eck$LassoCheckResult]: Loop: 39539#L1637-2 assume !false; 39532#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 39530#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 39524#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 39521#L1645 assume 1 != cleanup_~tmp___0~6#1; 39516#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 39514#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 38407#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 39463#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 39454#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 39452#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 39366#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 39367#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 37289#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 38089#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 38091#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 37814#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 40818#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 40817#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 40816#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 40815#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 40814#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 40516#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 37515#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 37499#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 40822#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 40812#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 40571#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 39014#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 37899#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 37900#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 41113#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 41112#L852-5 assume !(1 == ~currentHeading~0); 41111#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 37551#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 38608#L868-11 assume { :end_inline_continueInDirection } true; 38609#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 39607#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 39606#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 39605#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 39604#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 39559#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 39546#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 39542#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 39539#L1637-2 [2021-12-16 09:51:13,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:13,770 INFO L85 PathProgramCache]: Analyzing trace with hash -2094191695, now seen corresponding path program 3 times [2021-12-16 09:51:13,770 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:13,770 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189357617] [2021-12-16 09:51:13,770 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:13,770 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:13,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:13,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:13,791 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:13,791 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189357617] [2021-12-16 09:51:13,791 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189357617] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:13,791 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:13,791 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:13,791 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1089866127] [2021-12-16 09:51:13,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:13,792 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:13,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:13,792 INFO L85 PathProgramCache]: Analyzing trace with hash 834506397, now seen corresponding path program 1 times [2021-12-16 09:51:13,792 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:13,793 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1743446747] [2021-12-16 09:51:13,793 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:13,793 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:13,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:13,819 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:13,820 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:13,820 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1743446747] [2021-12-16 09:51:13,820 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1743446747] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:13,820 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:13,820 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 09:51:13,820 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1265687512] [2021-12-16 09:51:13,821 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:13,821 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:13,821 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:13,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 09:51:13,821 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2021-12-16 09:51:13,822 INFO L87 Difference]: Start difference. First operand 4087 states and 7496 transitions. cyclomatic complexity: 3410 Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 7 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:14,760 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:14,760 INFO L93 Difference]: Finished difference Result 26662 states and 49330 transitions. [2021-12-16 09:51:14,760 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2021-12-16 09:51:14,761 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26662 states and 49330 transitions. [2021-12-16 09:51:14,857 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22253 [2021-12-16 09:51:14,943 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26662 states to 26662 states and 49330 transitions. [2021-12-16 09:51:14,943 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26662 [2021-12-16 09:51:14,965 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26662 [2021-12-16 09:51:14,966 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26662 states and 49330 transitions. [2021-12-16 09:51:14,989 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:14,989 INFO L681 BuchiCegarLoop]: Abstraction has 26662 states and 49330 transitions. [2021-12-16 09:51:15,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26662 states and 49330 transitions. [2021-12-16 09:51:15,212 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26662 to 7785. [2021-12-16 09:51:15,222 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7785 states, 7785 states have (on average 1.842003853564547) internal successors, (14340), 7784 states have internal predecessors, (14340), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:15,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7785 states to 7785 states and 14340 transitions. [2021-12-16 09:51:15,236 INFO L704 BuchiCegarLoop]: Abstraction has 7785 states and 14340 transitions. [2021-12-16 09:51:15,236 INFO L587 BuchiCegarLoop]: Abstraction has 7785 states and 14340 transitions. [2021-12-16 09:51:15,236 INFO L425 BuchiCegarLoop]: ======== Iteration 7============ [2021-12-16 09:51:15,236 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7785 states and 14340 transitions. [2021-12-16 09:51:15,252 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5930 [2021-12-16 09:51:15,252 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:15,252 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:15,253 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:15,253 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:15,253 INFO L791 eck$LassoCheckResult]: Stem: 68860#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 68861#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 69666#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 69667#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 69049#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 68661#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 68662#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 68703#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 69064#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 68723#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 69311#L2208 assume 0 == initPersonOnFloor_~floor#1; 70069#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68039#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 68540#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 69456#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 69902#L2000 assume !(0 == callOnFloor_~floorID#1); 69903#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 68821#L2012-2 assume { :end_inline_callOnFloor } true; 70154#L2352 assume { :end_inline_initPersonOnFloor } true; 70153#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 70149#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 70146#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 70144#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 68983#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68110#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 70097#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 68485#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 68486#L2000-2 assume !(0 == callOnFloor_~floorID#1); 69749#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 68897#L2012-5 assume { :end_inline_callOnFloor } true; 69418#L2352-1 assume { :end_inline_initPersonOnFloor } true; 69419#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 68322#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 68323#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 70106#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 70096#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 68584#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 69238#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 69240#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 70105#L1034 assume !(0 != timeShift_~tmp___9~2#1); 69845#L1125 assume !(1 == ~doorState~0); 68040#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 68041#L476 assume !(1 == stopRequestedInDirection_~dir#1); 69799#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 69325#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 68136#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 68137#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 70047#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 69596#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 68134#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 68135#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 70053#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 68303#L852-2 assume !(1 == ~currentHeading~0); 68304#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 68403#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 69186#L868-5 assume { :end_inline_continueInDirection } true; 69356#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 70319#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 70318#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 70315#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 70310#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 70299#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 70298#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 70297#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 70295#L1637-2 [2021-12-16 09:51:15,254 INFO L793 eck$LassoCheckResult]: Loop: 70295#L1637-2 assume !false; 70294#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 70293#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 70255#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 70253#L1645 assume 1 != cleanup_~tmp___0~6#1; 70229#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 70227#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 70224#L1936-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 70222#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 70216#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 70207#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 70206#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 70205#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 70202#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 70201#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 70200#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 70197#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 70199#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 70435#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 70434#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 70433#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 70432#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 70431#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 70429#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 70430#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 70393#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 70725#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 70368#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 70703#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 70701#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 70457#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 70378#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 70371#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 70361#L852-5 assume !(1 == ~currentHeading~0); 70352#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 70347#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 70344#L868-11 assume { :end_inline_continueInDirection } true; 70342#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 70341#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 70340#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 70338#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 70335#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 70326#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 70320#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 70296#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 70295#L1637-2 [2021-12-16 09:51:15,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:15,254 INFO L85 PathProgramCache]: Analyzing trace with hash -2087993221, now seen corresponding path program 1 times [2021-12-16 09:51:15,255 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:15,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845196196] [2021-12-16 09:51:15,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:15,255 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:15,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:15,282 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:15,282 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:15,283 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845196196] [2021-12-16 09:51:15,283 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845196196] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:15,283 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:15,283 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:15,283 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981898741] [2021-12-16 09:51:15,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:15,284 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:15,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:15,284 INFO L85 PathProgramCache]: Analyzing trace with hash 432281374, now seen corresponding path program 1 times [2021-12-16 09:51:15,284 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:15,284 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [930838441] [2021-12-16 09:51:15,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:15,285 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:15,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:15,297 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:15,298 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:15,298 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [930838441] [2021-12-16 09:51:15,298 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [930838441] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:15,299 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:15,299 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:15,299 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163584741] [2021-12-16 09:51:15,299 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:15,299 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:15,299 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:15,300 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 09:51:15,300 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 09:51:15,300 INFO L87 Difference]: Start difference. First operand 7785 states and 14340 transitions. cyclomatic complexity: 6556 Second operand has 3 states, 3 states have (on average 15.0) internal successors, (45), 3 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:15,567 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:15,567 INFO L93 Difference]: Finished difference Result 8380 states and 15232 transitions. [2021-12-16 09:51:15,568 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 09:51:15,568 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8380 states and 15232 transitions. [2021-12-16 09:51:15,592 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6429 [2021-12-16 09:51:15,612 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8380 states to 8380 states and 15232 transitions. [2021-12-16 09:51:15,612 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8380 [2021-12-16 09:51:15,617 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8380 [2021-12-16 09:51:15,617 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8380 states and 15232 transitions. [2021-12-16 09:51:15,625 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:15,625 INFO L681 BuchiCegarLoop]: Abstraction has 8380 states and 15232 transitions. [2021-12-16 09:51:15,629 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8380 states and 15232 transitions. [2021-12-16 09:51:15,688 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8380 to 7785. [2021-12-16 09:51:15,840 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7785 states, 7785 states have (on average 1.8327552986512523) internal successors, (14268), 7784 states have internal predecessors, (14268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:15,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7785 states to 7785 states and 14268 transitions. [2021-12-16 09:51:15,883 INFO L704 BuchiCegarLoop]: Abstraction has 7785 states and 14268 transitions. [2021-12-16 09:51:15,883 INFO L587 BuchiCegarLoop]: Abstraction has 7785 states and 14268 transitions. [2021-12-16 09:51:15,883 INFO L425 BuchiCegarLoop]: ======== Iteration 8============ [2021-12-16 09:51:15,884 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7785 states and 14268 transitions. [2021-12-16 09:51:15,906 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5930 [2021-12-16 09:51:15,906 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:15,906 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:15,908 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:15,908 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:15,908 INFO L791 eck$LassoCheckResult]: Stem: 85044#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 85045#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 85884#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 85885#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 85240#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 84839#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 84840#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 84886#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 85257#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 84906#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 85512#L2208 assume 0 == initPersonOnFloor_~floor#1; 86341#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 84211#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 84712#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 85659#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 86150#L2000 assume !(0 == callOnFloor_~floorID#1); 86151#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 85005#L2012-2 assume { :end_inline_callOnFloor } true; 86463#L2352 assume { :end_inline_initPersonOnFloor } true; 86462#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 86457#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 86453#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 86451#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 86423#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 86419#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 86417#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 86413#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 86412#L2000-2 assume !(0 == callOnFloor_~floorID#1); 86411#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 86407#L2012-5 assume { :end_inline_callOnFloor } true; 86406#L2352-1 assume { :end_inline_initPersonOnFloor } true; 86405#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 86404#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 86403#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 86402#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 86388#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 84756#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 85433#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 85435#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 86400#L1034 assume !(0 != timeShift_~tmp___9~2#1); 86088#L1125 assume !(1 == ~doorState~0); 84212#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 84213#L476 assume !(1 == stopRequestedInDirection_~dir#1); 86033#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 85527#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 84308#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 84309#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 86316#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 85810#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 84306#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 84307#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 86325#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 84475#L852-2 assume !(1 == ~currentHeading~0); 84476#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 84576#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 85379#L868-5 assume { :end_inline_continueInDirection } true; 85558#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 85140#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 85141#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 84481#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 84483#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 88790#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 88738#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 86572#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 86567#L1637-2 [2021-12-16 09:51:15,909 INFO L793 eck$LassoCheckResult]: Loop: 86567#L1637-2 assume !false; 86550#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 86540#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 86539#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 86534#L1645 assume 1 != cleanup_~tmp___0~6#1; 86531#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 86529#L1932-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 86530#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 86547#L380 assume !(0 != anyStopRequested_~tmp___3~0#1); 86519#L384 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 86508#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 86509#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 86503#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 86504#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 86502#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 88872#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 88874#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 88876#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 88875#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 88869#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 88870#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 88887#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 89023#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 89021#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 89022#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 88987#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 89120#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 88960#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 89117#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 89114#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 89113#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 88970#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 88963#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 88953#L852-5 assume !(1 == ~currentHeading~0); 88944#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 88938#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 88934#L868-11 assume { :end_inline_continueInDirection } true; 88929#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 88923#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 88921#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 88922#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 88906#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 88894#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 88883#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 86571#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 86567#L1637-2 [2021-12-16 09:51:15,909 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:15,909 INFO L85 PathProgramCache]: Analyzing trace with hash -2087993221, now seen corresponding path program 2 times [2021-12-16 09:51:15,909 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:15,910 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [599839109] [2021-12-16 09:51:15,910 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:15,910 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:15,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:15,934 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:15,934 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:15,934 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [599839109] [2021-12-16 09:51:15,935 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [599839109] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:15,935 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:15,936 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:15,936 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [400364186] [2021-12-16 09:51:15,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:15,936 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:15,936 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:15,937 INFO L85 PathProgramCache]: Analyzing trace with hash 1751581641, now seen corresponding path program 1 times [2021-12-16 09:51:15,939 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:15,942 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1378277652] [2021-12-16 09:51:15,942 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:15,942 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:15,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:15,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:15,974 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:15,975 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1378277652] [2021-12-16 09:51:15,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1378277652] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:15,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:15,976 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:15,977 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [134223592] [2021-12-16 09:51:15,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:15,978 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:15,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:15,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:15,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:15,979 INFO L87 Difference]: Start difference. First operand 7785 states and 14268 transitions. cyclomatic complexity: 6484 Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:16,276 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:16,276 INFO L93 Difference]: Finished difference Result 27656 states and 51221 transitions. [2021-12-16 09:51:16,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 09:51:16,277 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27656 states and 51221 transitions. [2021-12-16 09:51:16,399 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23385 [2021-12-16 09:51:16,591 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27656 states to 27656 states and 51221 transitions. [2021-12-16 09:51:16,592 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27656 [2021-12-16 09:51:16,619 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27656 [2021-12-16 09:51:16,619 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27656 states and 51221 transitions. [2021-12-16 09:51:16,643 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:16,643 INFO L681 BuchiCegarLoop]: Abstraction has 27656 states and 51221 transitions. [2021-12-16 09:51:16,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27656 states and 51221 transitions. [2021-12-16 09:51:16,838 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27656 to 14603. [2021-12-16 09:51:16,857 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14603 states, 14603 states have (on average 1.8340067109498048) internal successors, (26782), 14602 states have internal predecessors, (26782), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:16,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14603 states to 14603 states and 26782 transitions. [2021-12-16 09:51:16,888 INFO L704 BuchiCegarLoop]: Abstraction has 14603 states and 26782 transitions. [2021-12-16 09:51:16,888 INFO L587 BuchiCegarLoop]: Abstraction has 14603 states and 26782 transitions. [2021-12-16 09:51:16,888 INFO L425 BuchiCegarLoop]: ======== Iteration 9============ [2021-12-16 09:51:16,888 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14603 states and 26782 transitions. [2021-12-16 09:51:16,926 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11636 [2021-12-16 09:51:16,927 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:16,927 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:16,928 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:16,928 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:16,928 INFO L791 eck$LassoCheckResult]: Stem: 120497#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 120498#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 121311#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 121312#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 120685#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 120297#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 120298#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 120341#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 120700#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 120361#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 120948#L2208 assume 0 == initPersonOnFloor_~floor#1; 121717#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 119673#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 120174#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 121099#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 121549#L2000 assume !(0 == callOnFloor_~floorID#1); 121550#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 120459#L2012-2 assume { :end_inline_callOnFloor } true; 121804#L2352 assume { :end_inline_initPersonOnFloor } true; 121803#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 121799#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 121796#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 120113#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 120114#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 121768#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 119761#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 119762#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 120779#L2000-2 assume !(0 == callOnFloor_~floorID#1); 120780#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 120397#L2012-5 assume { :end_inline_callOnFloor } true; 120398#L2352-1 assume { :end_inline_initPersonOnFloor } true; 121760#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 121759#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 121758#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 121757#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 121744#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 120220#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 120873#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 120875#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 121756#L1034 assume !(0 != timeShift_~tmp___9~2#1); 121492#L1125 assume !(1 == ~doorState~0); 119674#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 119675#L476 assume !(1 == stopRequestedInDirection_~dir#1); 121443#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 120963#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 119769#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 119770#L907 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 121697#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121240#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 119764#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 119765#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 121703#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 119936#L852-2 assume !(1 == ~currentHeading~0); 119937#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 120038#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 120821#L868-5 assume { :end_inline_continueInDirection } true; 120994#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 122368#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 122366#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 122365#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 122364#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 122334#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 122322#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 122320#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 122318#L1637-2 [2021-12-16 09:51:16,929 INFO L793 eck$LassoCheckResult]: Loop: 122318#L1637-2 assume !false; 122317#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 122316#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 122315#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 122313#L1645 assume 1 != cleanup_~tmp___0~6#1; 122312#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 122310#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 122311#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 122314#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 122300#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 122295#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 122284#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 122277#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 122268#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 122267#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 122266#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 122264#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 122262#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 122257#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 122254#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 122256#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 122875#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 122246#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 122244#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 122243#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 122225#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 122202#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 122179#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 122159#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 121890#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 121889#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 121881#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121882#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 122470#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 121816#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 121817#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 121810#L852-5 assume !(1 == ~currentHeading~0); 121812#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 122363#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 122357#L868-11 assume { :end_inline_continueInDirection } true; 122355#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 122353#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 122351#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 122350#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 122349#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 122328#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 122321#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 122319#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 122318#L1637-2 [2021-12-16 09:51:16,929 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:16,929 INFO L85 PathProgramCache]: Analyzing trace with hash -2087993221, now seen corresponding path program 3 times [2021-12-16 09:51:16,929 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:16,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1128260838] [2021-12-16 09:51:16,930 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:16,930 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:16,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:16,956 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:16,956 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:16,956 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1128260838] [2021-12-16 09:51:16,957 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1128260838] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:16,957 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:16,957 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:16,957 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [822574811] [2021-12-16 09:51:16,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:16,957 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:16,958 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:16,958 INFO L85 PathProgramCache]: Analyzing trace with hash 1199041105, now seen corresponding path program 1 times [2021-12-16 09:51:16,958 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:16,958 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1171041282] [2021-12-16 09:51:16,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:16,958 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:16,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:16,978 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:16,978 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:16,978 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1171041282] [2021-12-16 09:51:16,979 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1171041282] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:16,979 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:16,979 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:16,979 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1013807553] [2021-12-16 09:51:16,979 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:16,979 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:16,980 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:16,980 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:16,980 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:16,980 INFO L87 Difference]: Start difference. First operand 14603 states and 26782 transitions. cyclomatic complexity: 12180 Second operand has 4 states, 4 states have (on average 12.0) internal successors, (48), 4 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:17,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:17,255 INFO L93 Difference]: Finished difference Result 45844 states and 84367 transitions. [2021-12-16 09:51:17,255 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:17,256 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45844 states and 84367 transitions. [2021-12-16 09:51:17,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42708 [2021-12-16 09:51:17,560 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45844 states to 45844 states and 84367 transitions. [2021-12-16 09:51:17,560 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45844 [2021-12-16 09:51:17,595 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45844 [2021-12-16 09:51:17,596 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45844 states and 84367 transitions. [2021-12-16 09:51:17,629 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:17,629 INFO L681 BuchiCegarLoop]: Abstraction has 45844 states and 84367 transitions. [2021-12-16 09:51:17,655 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45844 states and 84367 transitions. [2021-12-16 09:51:17,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 45844 to 14625. [2021-12-16 09:51:18,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14625 states, 14625 states have (on average 1.8327521367521367) internal successors, (26804), 14624 states have internal predecessors, (26804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:18,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14625 states to 14625 states and 26804 transitions. [2021-12-16 09:51:18,042 INFO L704 BuchiCegarLoop]: Abstraction has 14625 states and 26804 transitions. [2021-12-16 09:51:18,042 INFO L587 BuchiCegarLoop]: Abstraction has 14625 states and 26804 transitions. [2021-12-16 09:51:18,042 INFO L425 BuchiCegarLoop]: ======== Iteration 10============ [2021-12-16 09:51:18,042 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14625 states and 26804 transitions. [2021-12-16 09:51:18,080 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11656 [2021-12-16 09:51:18,081 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:18,081 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:18,082 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:18,082 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:18,082 INFO L791 eck$LassoCheckResult]: Stem: 180969#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 180970#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 181825#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 181826#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 181162#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 180764#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 180765#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 180809#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 181177#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 180829#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 181433#L2208 assume 0 == initPersonOnFloor_~floor#1; 182325#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 180133#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 180641#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 181592#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 182110#L2000 assume !(0 == callOnFloor_~floorID#1); 182111#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 180931#L2012-2 assume { :end_inline_callOnFloor } true; 182468#L2352 assume { :end_inline_initPersonOnFloor } true; 182467#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 182463#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 182460#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 182456#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 182428#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 182424#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 182422#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 182418#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 182417#L2000-2 assume !(0 == callOnFloor_~floorID#1); 182416#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 182412#L2012-5 assume { :end_inline_callOnFloor } true; 182411#L2352-1 assume { :end_inline_initPersonOnFloor } true; 182410#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 182409#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 182408#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 182407#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 182376#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 180687#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 181353#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 181355#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 182404#L1034 assume !(0 != timeShift_~tmp___9~2#1); 182043#L1125 assume !(1 == ~doorState~0); 180134#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 180135#L476 assume !(1 == stopRequestedInDirection_~dir#1); 181986#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 181449#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 180232#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 180233#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 182380#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 182406#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 180227#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 180228#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 182307#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 180402#L852-2 assume !(1 == ~currentHeading~0); 180403#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 180502#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 181300#L868-5 assume { :end_inline_continueInDirection } true; 181481#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 192060#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 192059#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 192058#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 181856#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 181857#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 192032#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 192030#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 192025#L1637-2 [2021-12-16 09:51:18,083 INFO L793 eck$LassoCheckResult]: Loop: 192025#L1637-2 assume !false; 192017#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 192012#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 192007#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 192003#L1645 assume 1 != cleanup_~tmp___0~6#1; 192000#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 191996#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 191997#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 192014#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 192009#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 192005#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 192002#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 190206#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 190176#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 190177#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 190076#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 190077#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 190182#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 190181#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 180999#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 180707#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 189812#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 188007#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 187949#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 187951#L1125-3 assume 1 == ~doorState~0;~doorState~0 := 0; 181351#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 181352#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 182079#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 188879#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 180976#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 180266#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 180268#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 182596#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 180797#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 180798#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 188882#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 188881#L852-5 assume !(1 == ~currentHeading~0); 188880#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 182398#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 182399#L868-11 assume { :end_inline_continueInDirection } true; 192198#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 192196#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 192189#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 192188#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 192137#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 192120#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 192112#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 192029#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 192025#L1637-2 [2021-12-16 09:51:18,083 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:18,083 INFO L85 PathProgramCache]: Analyzing trace with hash 212829369, now seen corresponding path program 1 times [2021-12-16 09:51:18,083 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:18,084 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [618262918] [2021-12-16 09:51:18,084 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:18,084 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:18,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:18,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:18,117 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:18,117 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [618262918] [2021-12-16 09:51:18,117 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [618262918] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:18,117 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:18,117 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:18,117 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1678364453] [2021-12-16 09:51:18,117 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:18,118 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:18,118 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:18,118 INFO L85 PathProgramCache]: Analyzing trace with hash -795103601, now seen corresponding path program 1 times [2021-12-16 09:51:18,118 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:18,118 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [874782702] [2021-12-16 09:51:18,118 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:18,119 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:18,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:18,138 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:18,139 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:18,139 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [874782702] [2021-12-16 09:51:18,139 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [874782702] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:18,139 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:18,139 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:18,139 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1536680040] [2021-12-16 09:51:18,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:18,140 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:18,140 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:18,141 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:18,141 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:18,141 INFO L87 Difference]: Start difference. First operand 14625 states and 26804 transitions. cyclomatic complexity: 12180 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:18,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:18,603 INFO L93 Difference]: Finished difference Result 55446 states and 100108 transitions. [2021-12-16 09:51:18,603 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 09:51:18,604 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55446 states and 100108 transitions. [2021-12-16 09:51:18,881 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52198 [2021-12-16 09:51:19,042 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55446 states to 55446 states and 100108 transitions. [2021-12-16 09:51:19,042 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55446 [2021-12-16 09:51:19,084 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55446 [2021-12-16 09:51:19,084 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55446 states and 100108 transitions. [2021-12-16 09:51:19,115 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:19,115 INFO L681 BuchiCegarLoop]: Abstraction has 55446 states and 100108 transitions. [2021-12-16 09:51:19,144 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55446 states and 100108 transitions. [2021-12-16 09:51:19,650 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55446 to 17072. [2021-12-16 09:51:19,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17072 states, 17072 states have (on average 1.8017806935332707) internal successors, (30760), 17071 states have internal predecessors, (30760), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:19,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17072 states to 17072 states and 30760 transitions. [2021-12-16 09:51:19,713 INFO L704 BuchiCegarLoop]: Abstraction has 17072 states and 30760 transitions. [2021-12-16 09:51:19,713 INFO L587 BuchiCegarLoop]: Abstraction has 17072 states and 30760 transitions. [2021-12-16 09:51:19,713 INFO L425 BuchiCegarLoop]: ======== Iteration 11============ [2021-12-16 09:51:19,713 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17072 states and 30760 transitions. [2021-12-16 09:51:19,755 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13940 [2021-12-16 09:51:19,755 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:19,755 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:19,757 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:19,757 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:19,757 INFO L791 eck$LassoCheckResult]: Stem: 251057#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 251058#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 251899#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 251900#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 251252#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 250850#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 250851#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 250896#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 251267#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 250916#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 251520#L2208 assume 0 == initPersonOnFloor_~floor#1; 252351#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 250222#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 250728#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 251676#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 252167#L2000 assume !(0 == callOnFloor_~floorID#1); 252168#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 251019#L2012-2 assume { :end_inline_callOnFloor } true; 252478#L2352 assume { :end_inline_initPersonOnFloor } true; 252477#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 252473#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 252470#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 252469#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 252438#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 252434#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 252432#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 252428#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 252427#L2000-2 assume !(0 == callOnFloor_~floorID#1); 252426#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 252422#L2012-5 assume { :end_inline_callOnFloor } true; 252421#L2352-1 assume { :end_inline_initPersonOnFloor } true; 252420#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 252419#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 252418#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 252417#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 252398#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 250773#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 251442#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 251444#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 252416#L1034 assume !(0 != timeShift_~tmp___9~2#1); 252099#L1125 assume !(1 == ~doorState~0); 250223#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250224#L476 assume !(1 == stopRequestedInDirection_~dir#1); 252048#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 252054#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 252534#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 252490#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 252533#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 252532#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 252508#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 252501#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 252499#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 252497#L852-2 assume !(1 == ~currentHeading~0); 252364#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 250591#L862-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 252247#L868-5 assume { :end_inline_continueInDirection } true; 251570#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 256155#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 256154#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 256153#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 256152#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 256141#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 256140#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 256139#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 256135#L1637-2 [2021-12-16 09:51:19,758 INFO L793 eck$LassoCheckResult]: Loop: 256135#L1637-2 assume !false; 256132#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 256128#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 256121#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 256102#L1645 assume 1 != cleanup_~tmp___0~6#1; 256101#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 256100#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 256063#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 256055#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 254316#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 254314#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 254281#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 254270#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 254250#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 254248#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 254246#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 254244#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 254242#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 254240#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 254234#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 254228#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 254225#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 254223#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 254221#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 254218#L1125-3 assume !(1 == ~doorState~0); 254219#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 256340#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 256341#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 256243#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 256339#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 256216#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 256335#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 256305#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 256264#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 256227#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 256219#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 256208#L852-5 assume !(1 == ~currentHeading~0); 256198#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 256192#L862-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 256188#L868-11 assume { :end_inline_continueInDirection } true; 256185#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 256184#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 256180#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 256176#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 256175#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 256169#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 256162#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 256138#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 256135#L1637-2 [2021-12-16 09:51:19,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:19,758 INFO L85 PathProgramCache]: Analyzing trace with hash 212829369, now seen corresponding path program 2 times [2021-12-16 09:51:19,758 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:19,759 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [548124827] [2021-12-16 09:51:19,759 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:19,759 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:19,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:19,786 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:19,786 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:19,786 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [548124827] [2021-12-16 09:51:19,786 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [548124827] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:19,787 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:19,787 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:19,787 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [677943240] [2021-12-16 09:51:19,787 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:19,787 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:19,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:19,787 INFO L85 PathProgramCache]: Analyzing trace with hash -929117107, now seen corresponding path program 1 times [2021-12-16 09:51:19,788 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:19,788 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1765443781] [2021-12-16 09:51:19,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:19,788 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:19,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:19,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:19,836 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:19,836 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1765443781] [2021-12-16 09:51:19,837 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1765443781] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:19,837 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:19,837 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 09:51:19,837 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [611770978] [2021-12-16 09:51:19,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:19,837 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:19,838 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:19,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 09:51:19,838 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2021-12-16 09:51:19,838 INFO L87 Difference]: Start difference. First operand 17072 states and 30760 transitions. cyclomatic complexity: 13689 Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 7 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:21,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:21,445 INFO L93 Difference]: Finished difference Result 64900 states and 116030 transitions. [2021-12-16 09:51:21,445 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-12-16 09:51:21,446 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64900 states and 116030 transitions. [2021-12-16 09:51:21,698 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 61644 [2021-12-16 09:51:21,886 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64900 states to 64860 states and 115990 transitions. [2021-12-16 09:51:21,887 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64860 [2021-12-16 09:51:21,926 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64860 [2021-12-16 09:51:21,927 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64860 states and 115990 transitions. [2021-12-16 09:51:21,962 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:21,962 INFO L681 BuchiCegarLoop]: Abstraction has 64860 states and 115990 transitions. [2021-12-16 09:51:21,988 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64860 states and 115990 transitions. [2021-12-16 09:51:22,520 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64860 to 36716. [2021-12-16 09:51:22,554 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36716 states, 36716 states have (on average 1.8106819915023422) internal successors, (66481), 36715 states have internal predecessors, (66481), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:22,622 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36716 states to 36716 states and 66481 transitions. [2021-12-16 09:51:22,622 INFO L704 BuchiCegarLoop]: Abstraction has 36716 states and 66481 transitions. [2021-12-16 09:51:22,622 INFO L587 BuchiCegarLoop]: Abstraction has 36716 states and 66481 transitions. [2021-12-16 09:51:22,622 INFO L425 BuchiCegarLoop]: ======== Iteration 12============ [2021-12-16 09:51:22,622 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 36716 states and 66481 transitions. [2021-12-16 09:51:22,737 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 33536 [2021-12-16 09:51:22,737 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:22,737 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:22,738 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:22,739 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:22,739 INFO L791 eck$LassoCheckResult]: Stem: 333064#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 333065#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 333907#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 333908#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 333258#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 332862#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 332863#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 332906#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 333273#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 332926#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 333531#L2208 assume 0 == initPersonOnFloor_~floor#1; 334398#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 332229#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 332741#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 333685#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 334198#L2000 assume !(0 == callOnFloor_~floorID#1); 334199#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 333026#L2012-2 assume { :end_inline_callOnFloor } true; 334532#L2352 assume { :end_inline_initPersonOnFloor } true; 334531#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 334527#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 334524#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 334523#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 334492#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 334488#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 334486#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 334482#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 334481#L2000-2 assume !(0 == callOnFloor_~floorID#1); 334480#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 334476#L2012-5 assume { :end_inline_callOnFloor } true; 334475#L2352-1 assume { :end_inline_initPersonOnFloor } true; 334474#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 334473#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 334472#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 334471#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 334452#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 332786#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 333454#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 333456#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 334470#L1034 assume !(0 != timeShift_~tmp___9~2#1); 334120#L1125 assume !(1 == ~doorState~0); 332230#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 332231#L476 assume !(1 == stopRequestedInDirection_~dir#1); 334063#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 334070#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 334599#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 334555#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 334598#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 334597#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 334573#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 334566#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 334564#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 334562#L852-2 assume !(1 == ~currentHeading~0); 334413#L862-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 332602#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 334280#L868-5 assume { :end_inline_continueInDirection } true; 333578#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 351494#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 351493#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 351489#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 351485#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 351474#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 351439#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 351428#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 351425#L1637-2 [2021-12-16 09:51:22,739 INFO L793 eck$LassoCheckResult]: Loop: 351425#L1637-2 assume !false; 351410#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 351405#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 351397#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 351253#L1645 assume 1 != cleanup_~tmp___0~6#1; 342010#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 342007#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 342005#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 342002#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 342000#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 341998#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 341997#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 341896#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 341887#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 341886#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 341827#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 341822#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 341818#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 341817#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 341816#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 341806#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 341794#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 341785#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 341782#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 341777#L1125-3 assume !(1 == ~doorState~0); 341778#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 352944#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 352931#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 352903#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 352718#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 352716#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 352717#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 352670#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 352651#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 352630#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 352627#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 352628#L852-5 assume !(1 == ~currentHeading~0); 353071#L862-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 353070#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 352177#L868-11 assume { :end_inline_continueInDirection } true; 351929#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 351928#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 351927#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 351925#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 351921#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 351913#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 351746#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 351427#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 351425#L1637-2 [2021-12-16 09:51:22,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:22,740 INFO L85 PathProgramCache]: Analyzing trace with hash -180197641, now seen corresponding path program 1 times [2021-12-16 09:51:22,740 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:22,740 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [879474783] [2021-12-16 09:51:22,740 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:22,740 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:22,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:22,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:22,895 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:22,895 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [879474783] [2021-12-16 09:51:22,896 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [879474783] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:22,897 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:22,897 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:22,898 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1313665849] [2021-12-16 09:51:22,898 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:22,907 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:22,907 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:22,908 INFO L85 PathProgramCache]: Analyzing trace with hash -1322144117, now seen corresponding path program 1 times [2021-12-16 09:51:22,908 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:22,908 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [137513157] [2021-12-16 09:51:22,908 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:22,908 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:22,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:22,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:22,924 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:22,924 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [137513157] [2021-12-16 09:51:22,924 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [137513157] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:22,924 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:22,924 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:22,924 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [354982904] [2021-12-16 09:51:22,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:22,925 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:22,925 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:22,925 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 09:51:22,925 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 09:51:22,925 INFO L87 Difference]: Start difference. First operand 36716 states and 66481 transitions. cyclomatic complexity: 29766 Second operand has 3 states, 3 states have (on average 16.0) internal successors, (48), 3 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:23,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:23,134 INFO L93 Difference]: Finished difference Result 52626 states and 94712 transitions. [2021-12-16 09:51:23,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 09:51:23,135 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52626 states and 94712 transitions. [2021-12-16 09:51:23,372 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 49444 [2021-12-16 09:51:23,555 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52626 states to 52626 states and 94712 transitions. [2021-12-16 09:51:23,555 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52626 [2021-12-16 09:51:23,600 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52626 [2021-12-16 09:51:23,600 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52626 states and 94712 transitions. [2021-12-16 09:51:23,636 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:23,636 INFO L681 BuchiCegarLoop]: Abstraction has 52626 states and 94712 transitions. [2021-12-16 09:51:23,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52626 states and 94712 transitions. [2021-12-16 09:51:24,365 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52626 to 52534. [2021-12-16 09:51:24,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 52534 states, 52534 states have (on average 1.8005862869760536) internal successors, (94592), 52533 states have internal predecessors, (94592), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:24,514 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 52534 states to 52534 states and 94592 transitions. [2021-12-16 09:51:24,514 INFO L704 BuchiCegarLoop]: Abstraction has 52534 states and 94592 transitions. [2021-12-16 09:51:24,514 INFO L587 BuchiCegarLoop]: Abstraction has 52534 states and 94592 transitions. [2021-12-16 09:51:24,514 INFO L425 BuchiCegarLoop]: ======== Iteration 13============ [2021-12-16 09:51:24,514 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 52534 states and 94592 transitions. [2021-12-16 09:51:24,664 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 49352 [2021-12-16 09:51:24,664 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:24,664 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:24,666 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:24,666 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:24,667 INFO L791 eck$LassoCheckResult]: Stem: 422415#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 422416#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 423276#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 423277#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 422614#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 422210#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 422211#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 422256#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 422627#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 422276#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 422880#L2208 assume 0 == initPersonOnFloor_~floor#1; 423775#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 421577#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 422085#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 423042#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 423572#L2000 assume !(0 == callOnFloor_~floorID#1); 423573#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 422375#L2012-2 assume { :end_inline_callOnFloor } true; 423916#L2352 assume { :end_inline_initPersonOnFloor } true; 423915#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 423911#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 423908#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 423907#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 423876#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 423872#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 423870#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 423866#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 423865#L2000-2 assume !(0 == callOnFloor_~floorID#1); 423864#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 423860#L2012-5 assume { :end_inline_callOnFloor } true; 423859#L2352-1 assume { :end_inline_initPersonOnFloor } true; 423858#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 423857#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 423856#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 423855#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 423830#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 422130#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 422802#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 422804#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 423853#L1034 assume !(0 != timeShift_~tmp___9~2#1); 423497#L1125 assume !(1 == ~doorState~0); 423498#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 423979#L476 assume !(1 == stopRequestedInDirection_~dir#1); 423969#L645 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 423948#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 423968#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 423939#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 423966#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 423919#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 423920#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 423761#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 423762#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 421847#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 421848#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 421947#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 421948#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 423657#L868-5 assume { :end_inline_continueInDirection } true; 422929#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 453417#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 453415#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 453413#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 453414#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 453384#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 453382#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 453381#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 453375#L1637-2 [2021-12-16 09:51:24,667 INFO L793 eck$LassoCheckResult]: Loop: 453375#L1637-2 assume !false; 453373#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 453372#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 453371#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 453369#L1645 assume 1 != cleanup_~tmp___0~6#1; 453367#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 453364#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 453365#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 453370#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 453368#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 453366#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 453363#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 453345#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 453336#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 450205#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 450204#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 450127#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 449496#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 449495#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 449494#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 449489#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 449487#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 449481#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 449479#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 449472#L1125-3 assume !(1 == ~doorState~0); 449473#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 462377#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 462378#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 462343#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 462445#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 462328#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 462439#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 462436#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 462435#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 462416#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 462414#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 462413#L852-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 453431#L2511-9 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 453430#L856-15 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 453425#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 453422#L868-11 assume { :end_inline_continueInDirection } true; 453420#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 453419#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 453418#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 453416#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 453412#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 453400#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 453383#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 453380#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 453375#L1637-2 [2021-12-16 09:51:24,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:24,667 INFO L85 PathProgramCache]: Analyzing trace with hash 1172790436, now seen corresponding path program 1 times [2021-12-16 09:51:24,668 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:24,668 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1397487112] [2021-12-16 09:51:24,668 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:24,668 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:24,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:24,690 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:24,690 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:24,690 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1397487112] [2021-12-16 09:51:24,690 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1397487112] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:24,690 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:24,690 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:24,691 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1289876035] [2021-12-16 09:51:24,691 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:24,692 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:24,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:24,692 INFO L85 PathProgramCache]: Analyzing trace with hash 132193240, now seen corresponding path program 1 times [2021-12-16 09:51:24,692 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:24,692 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [121013321] [2021-12-16 09:51:24,692 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:24,692 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:24,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:24,714 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:24,715 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:24,715 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [121013321] [2021-12-16 09:51:24,715 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [121013321] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:24,715 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:24,715 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:24,715 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1612946256] [2021-12-16 09:51:24,715 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:24,716 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:24,716 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:24,716 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:24,716 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:24,716 INFO L87 Difference]: Start difference. First operand 52534 states and 94592 transitions. cyclomatic complexity: 42059 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:25,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:25,183 INFO L93 Difference]: Finished difference Result 82966 states and 150445 transitions. [2021-12-16 09:51:25,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:25,184 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82966 states and 150445 transitions. [2021-12-16 09:51:25,537 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 79584 [2021-12-16 09:51:25,980 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82966 states to 82936 states and 150407 transitions. [2021-12-16 09:51:25,981 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82936 [2021-12-16 09:51:26,045 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82936 [2021-12-16 09:51:26,046 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82936 states and 150407 transitions. [2021-12-16 09:51:26,094 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:26,095 INFO L681 BuchiCegarLoop]: Abstraction has 82936 states and 150407 transitions. [2021-12-16 09:51:26,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82936 states and 150407 transitions. [2021-12-16 09:51:26,663 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82936 to 49142. [2021-12-16 09:51:26,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49142 states, 49142 states have (on average 1.791298685442188) internal successors, (88028), 49141 states have internal predecessors, (88028), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:26,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49142 states to 49142 states and 88028 transitions. [2021-12-16 09:51:26,773 INFO L704 BuchiCegarLoop]: Abstraction has 49142 states and 88028 transitions. [2021-12-16 09:51:26,773 INFO L587 BuchiCegarLoop]: Abstraction has 49142 states and 88028 transitions. [2021-12-16 09:51:26,773 INFO L425 BuchiCegarLoop]: ======== Iteration 14============ [2021-12-16 09:51:26,773 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49142 states and 88028 transitions. [2021-12-16 09:51:26,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45836 [2021-12-16 09:51:26,897 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:26,897 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:26,898 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:26,898 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:26,898 INFO L791 eck$LassoCheckResult]: Stem: 557925#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 557926#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 558774#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 558775#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 558125#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 557722#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 557723#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 557767#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 558139#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 557787#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 558397#L2208 assume 0 == initPersonOnFloor_~floor#1; 559246#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 557089#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 557597#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 558549#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 559048#L2000 assume !(0 == callOnFloor_~floorID#1); 559049#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 557886#L2012-2 assume { :end_inline_callOnFloor } true; 559372#L2352 assume { :end_inline_initPersonOnFloor } true; 559371#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 559366#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 559363#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 559361#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 559335#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 559331#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 559329#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 559325#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 559324#L2000-2 assume !(0 == callOnFloor_~floorID#1); 559323#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 559319#L2012-5 assume { :end_inline_callOnFloor } true; 559318#L2352-1 assume { :end_inline_initPersonOnFloor } true; 559317#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 559316#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 559315#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 559314#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 559287#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 557642#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 558319#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 558321#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 559312#L1034 assume !(0 != timeShift_~tmp___9~2#1); 558975#L1125 assume !(1 == ~doorState~0); 558976#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 559559#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 559558#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 559545#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 559508#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 559544#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 559291#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 559216#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 559217#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 559466#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 559226#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 559227#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 557357#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 557358#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 557455#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 557456#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 559130#L868-5 assume { :end_inline_continueInDirection } true; 558446#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 564284#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 564283#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 564280#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 564275#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 564264#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 564263#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 564262#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 564256#L1637-2 [2021-12-16 09:51:26,899 INFO L793 eck$LassoCheckResult]: Loop: 564256#L1637-2 assume !false; 564257#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 564248#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 564249#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 564241#L1645 assume 1 != cleanup_~tmp___0~6#1; 564242#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 564232#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 564234#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 564224#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 564225#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 564214#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 564215#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 562172#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 562160#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 562161#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 562135#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 562136#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 580463#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 580461#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 580457#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 580451#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 580446#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 580440#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 580438#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 580428#L1125-3 assume !(1 == ~doorState~0); 580429#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 588045#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 588044#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 588041#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 588042#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 588673#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 588672#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 588025#L476-3 assume !(1 == stopRequestedInDirection_~dir#1); 588026#L645-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 588638#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 588637#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 577896#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 580338#L912-3 timeShift_#t~ret46#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 567239#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 567241#L2511-8 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 567228#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 564338#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 564329#L868-9 assume { :end_inline_continueInDirection } true; 564321#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 564319#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 564312#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 564313#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 564315#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 567246#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 564286#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 564287#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 564256#L1637-2 [2021-12-16 09:51:26,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:26,899 INFO L85 PathProgramCache]: Analyzing trace with hash 286482821, now seen corresponding path program 1 times [2021-12-16 09:51:26,900 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:26,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [421006663] [2021-12-16 09:51:26,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:26,900 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:26,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:26,918 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:26,918 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:26,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [421006663] [2021-12-16 09:51:26,918 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [421006663] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:26,918 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:26,918 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:26,918 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [467676272] [2021-12-16 09:51:26,919 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:26,919 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:26,919 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:26,919 INFO L85 PathProgramCache]: Analyzing trace with hash 117565053, now seen corresponding path program 1 times [2021-12-16 09:51:26,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:26,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1736162456] [2021-12-16 09:51:26,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:26,920 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:26,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:26,935 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:26,935 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:26,935 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1736162456] [2021-12-16 09:51:26,936 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1736162456] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:26,936 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:26,936 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:26,936 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [811904402] [2021-12-16 09:51:26,936 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:26,936 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:26,936 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:26,937 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:26,937 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:26,937 INFO L87 Difference]: Start difference. First operand 49142 states and 88028 transitions. cyclomatic complexity: 38887 Second operand has 4 states, 4 states have (on average 12.75) internal successors, (51), 4 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:27,474 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:27,475 INFO L93 Difference]: Finished difference Result 85874 states and 154655 transitions. [2021-12-16 09:51:27,475 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:27,475 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 85874 states and 154655 transitions. [2021-12-16 09:51:27,807 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 82252 [2021-12-16 09:51:28,040 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 85874 states to 85760 states and 154423 transitions. [2021-12-16 09:51:28,041 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 85760 [2021-12-16 09:51:28,326 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 85760 [2021-12-16 09:51:28,326 INFO L73 IsDeterministic]: Start isDeterministic. Operand 85760 states and 154423 transitions. [2021-12-16 09:51:28,368 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:28,368 INFO L681 BuchiCegarLoop]: Abstraction has 85760 states and 154423 transitions. [2021-12-16 09:51:28,400 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85760 states and 154423 transitions. [2021-12-16 09:51:28,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85760 to 48984. [2021-12-16 09:51:28,883 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48984 states, 48984 states have (on average 1.7887065164135227) internal successors, (87618), 48983 states have internal predecessors, (87618), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:28,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48984 states to 48984 states and 87618 transitions. [2021-12-16 09:51:28,962 INFO L704 BuchiCegarLoop]: Abstraction has 48984 states and 87618 transitions. [2021-12-16 09:51:28,962 INFO L587 BuchiCegarLoop]: Abstraction has 48984 states and 87618 transitions. [2021-12-16 09:51:28,962 INFO L425 BuchiCegarLoop]: ======== Iteration 15============ [2021-12-16 09:51:28,962 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48984 states and 87618 transitions. [2021-12-16 09:51:29,100 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45680 [2021-12-16 09:51:29,100 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:29,100 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:29,102 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:29,102 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:29,102 INFO L791 eck$LassoCheckResult]: Stem: 692952#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 692953#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 693814#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 693815#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 693154#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 692748#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 692749#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 692791#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 693167#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 692811#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 693420#L2208 assume 0 == initPersonOnFloor_~floor#1; 694332#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 692115#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 692625#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 693577#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 694109#L2000 assume !(0 == callOnFloor_~floorID#1); 694110#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 692913#L2012-2 assume { :end_inline_callOnFloor } true; 694470#L2352 assume { :end_inline_initPersonOnFloor } true; 694469#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 694464#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 694461#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 694459#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 694433#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 694429#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 694427#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 694423#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 694422#L2000-2 assume !(0 == callOnFloor_~floorID#1); 694421#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 694417#L2012-5 assume { :end_inline_callOnFloor } true; 694416#L2352-1 assume { :end_inline_initPersonOnFloor } true; 694415#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 694414#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 694413#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 694412#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 694380#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 692670#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 693346#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 693348#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 694410#L1034 assume !(0 != timeShift_~tmp___9~2#1); 694027#L1125 assume !(1 == ~doorState~0); 692116#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 692117#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 692483#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 692484#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 693978#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 694546#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 694547#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 707410#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 707408#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 707409#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 694313#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 694314#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 692383#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 692384#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 692485#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 692486#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 694201#L868-5 assume { :end_inline_continueInDirection } true; 693468#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 731273#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 731270#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 731268#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 731266#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 731175#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 731173#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 731171#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 731168#L1637-2 [2021-12-16 09:51:29,102 INFO L793 eck$LassoCheckResult]: Loop: 731168#L1637-2 assume !false; 731166#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 731164#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 731162#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 731160#L1645 assume 1 != cleanup_~tmp___0~6#1; 731142#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 731139#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 731140#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 740862#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 740859#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 740273#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 738251#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 712442#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 712358#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 711657#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 707628#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 707629#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 708430#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 708428#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 708422#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 708416#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 708413#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 708411#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 708408#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 708405#L1125-3 assume !(1 == ~doorState~0); 708406#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 729524#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 729523#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 729521#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 729519#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 729515#L907-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 729514#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 729512#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 729505#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 729486#L480-3 assume !(0 != stopRequestedInDirection_~tmp~2#1); 729487#L486-3 assume !(~currentFloorID~0 < 0); 729522#L501-3 assume !(~currentFloorID~0 < 0); 729520#L514-3 assume ~currentFloorID~0 < 1; 729517#L516-3 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 729494#L530-3 assume ~currentFloorID~0 < 1; 729513#L532-3 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 729491#L533-3 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 729485#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 729483#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 729352#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 729349#L912-3 timeShift_#t~ret46#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 729347#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 712511#L2511-8 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 729345#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 697788#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 731311#L868-9 assume { :end_inline_continueInDirection } true; 731308#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 731303#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 731298#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 731299#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 731300#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 731257#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 731249#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 731170#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 731168#L1637-2 [2021-12-16 09:51:29,103 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:29,103 INFO L85 PathProgramCache]: Analyzing trace with hash 286482821, now seen corresponding path program 2 times [2021-12-16 09:51:29,103 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:29,103 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [997545332] [2021-12-16 09:51:29,103 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:29,103 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:29,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:29,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:29,122 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:29,122 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [997545332] [2021-12-16 09:51:29,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [997545332] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:29,122 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:29,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:29,122 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640062217] [2021-12-16 09:51:29,122 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:29,123 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:29,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:29,123 INFO L85 PathProgramCache]: Analyzing trace with hash -452632121, now seen corresponding path program 1 times [2021-12-16 09:51:29,123 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:29,123 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728244013] [2021-12-16 09:51:29,123 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:29,123 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:29,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:29,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:29,150 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:29,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728244013] [2021-12-16 09:51:29,150 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728244013] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:29,151 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:29,151 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:29,151 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [420626581] [2021-12-16 09:51:29,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:29,152 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:29,152 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:29,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:29,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:29,153 INFO L87 Difference]: Start difference. First operand 48984 states and 87618 transitions. cyclomatic complexity: 38635 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:29,791 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:29,791 INFO L93 Difference]: Finished difference Result 142196 states and 258034 transitions. [2021-12-16 09:51:29,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-12-16 09:51:29,792 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142196 states and 258034 transitions. [2021-12-16 09:51:30,690 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 138656 [2021-12-16 09:51:31,095 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142196 states to 142176 states and 258014 transitions. [2021-12-16 09:51:31,095 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142176 [2021-12-16 09:51:31,209 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142176 [2021-12-16 09:51:31,209 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142176 states and 258014 transitions. [2021-12-16 09:51:31,294 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:31,294 INFO L681 BuchiCegarLoop]: Abstraction has 142176 states and 258014 transitions. [2021-12-16 09:51:31,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142176 states and 258014 transitions. [2021-12-16 09:51:32,140 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142176 to 48936. [2021-12-16 09:51:32,178 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48936 states, 48936 states have (on average 1.7871096942945888) internal successors, (87454), 48935 states have internal predecessors, (87454), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:32,258 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48936 states to 48936 states and 87454 transitions. [2021-12-16 09:51:32,258 INFO L704 BuchiCegarLoop]: Abstraction has 48936 states and 87454 transitions. [2021-12-16 09:51:32,258 INFO L587 BuchiCegarLoop]: Abstraction has 48936 states and 87454 transitions. [2021-12-16 09:51:32,258 INFO L425 BuchiCegarLoop]: ======== Iteration 16============ [2021-12-16 09:51:32,258 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48936 states and 87454 transitions. [2021-12-16 09:51:32,388 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45632 [2021-12-16 09:51:32,388 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:32,388 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:32,390 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:32,390 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:32,390 INFO L791 eck$LassoCheckResult]: Stem: 884155#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 884156#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 885034#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 885035#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 884357#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 883949#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 883950#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 883995#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 884370#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 884015#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 884625#L2208 assume 0 == initPersonOnFloor_~floor#1; 885547#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 883309#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 883824#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 884786#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 885337#L2000 assume !(0 == callOnFloor_~floorID#1); 885338#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 884115#L2012-2 assume { :end_inline_callOnFloor } true; 885684#L2352 assume { :end_inline_initPersonOnFloor } true; 885683#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 885678#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 885675#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 885673#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 885647#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 885643#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 885641#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 885637#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 885636#L2000-2 assume !(0 == callOnFloor_~floorID#1); 885635#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 885631#L2012-5 assume { :end_inline_callOnFloor } true; 885630#L2352-1 assume { :end_inline_initPersonOnFloor } true; 885629#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 885628#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 885627#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 885626#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 885596#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 883869#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 884548#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 884550#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 885624#L1034 assume !(0 != timeShift_~tmp___9~2#1); 885261#L1125 assume !(1 == ~doorState~0); 885262#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 885198#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 885200#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 885206#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 885207#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 885851#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 885796#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 885850#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 885690#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 885691#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 885751#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 885824#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 883578#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 883579#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 883681#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 883682#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 885431#L868-5 assume { :end_inline_continueInDirection } true; 884674#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 885042#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 885773#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 883583#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 883585#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 898032#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 898020#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 898018#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 898016#L1637-2 [2021-12-16 09:51:32,390 INFO L793 eck$LassoCheckResult]: Loop: 898016#L1637-2 assume !false; 898015#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 898014#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 898013#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 898012#L1645 assume 1 != cleanup_~tmp___0~6#1; 898011#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 898010#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 898008#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 898005#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 898003#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 897993#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 897982#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 897975#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 897966#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 897965#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 897964#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 897963#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 897931#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 897919#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 895984#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 895975#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 895967#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 895960#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 895952#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 895944#L1125-3 assume !(1 == ~doorState~0); 895945#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 898566#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 898567#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 898551#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 898552#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 908643#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 908642#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 908641#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 908640#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 908639#L480-3 assume !(0 != stopRequestedInDirection_~tmp~2#1); 908638#L486-3 assume !(~currentFloorID~0 < 0); 908637#L501-3 assume !(~currentFloorID~0 < 0); 908636#L514-3 assume ~currentFloorID~0 < 1; 908635#L516-3 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 908634#L530-3 assume ~currentFloorID~0 < 1; 898473#L532-3 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 898474#L533-3 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 898455#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 898456#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 898453#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 898403#L912-3 timeShift_#t~ret46#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 898404#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 898069#L2511-8 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 898064#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 893224#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 898058#L868-9 assume { :end_inline_continueInDirection } true; 898052#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 898051#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 898049#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 898050#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 898048#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 898026#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 898019#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 898017#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 898016#L1637-2 [2021-12-16 09:51:32,391 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:32,391 INFO L85 PathProgramCache]: Analyzing trace with hash 286482821, now seen corresponding path program 3 times [2021-12-16 09:51:32,391 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:32,391 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984517095] [2021-12-16 09:51:32,391 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:32,391 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:32,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:32,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:32,411 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:32,412 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984517095] [2021-12-16 09:51:32,412 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [984517095] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:32,412 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:32,412 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:32,412 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [831843090] [2021-12-16 09:51:32,412 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:32,412 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:32,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:32,413 INFO L85 PathProgramCache]: Analyzing trace with hash -1838835515, now seen corresponding path program 1 times [2021-12-16 09:51:32,413 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:32,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024551410] [2021-12-16 09:51:32,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:32,413 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:32,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:32,437 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:32,438 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:32,438 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024551410] [2021-12-16 09:51:32,438 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2024551410] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:32,438 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:32,438 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-12-16 09:51:32,438 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [432204076] [2021-12-16 09:51:32,438 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:32,439 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:32,439 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:32,439 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-12-16 09:51:32,439 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2021-12-16 09:51:32,439 INFO L87 Difference]: Start difference. First operand 48936 states and 87454 transitions. cyclomatic complexity: 38519 Second operand has 6 states, 6 states have (on average 9.833333333333334) internal successors, (59), 6 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:33,563 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:33,564 INFO L93 Difference]: Finished difference Result 151364 states and 274425 transitions. [2021-12-16 09:51:33,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-12-16 09:51:33,564 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 151364 states and 274425 transitions. [2021-12-16 09:51:34,621 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 147882 [2021-12-16 09:51:35,046 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 151364 states to 151364 states and 274425 transitions. [2021-12-16 09:51:35,046 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 151364 [2021-12-16 09:51:35,165 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 151364 [2021-12-16 09:51:35,166 INFO L73 IsDeterministic]: Start isDeterministic. Operand 151364 states and 274425 transitions. [2021-12-16 09:51:35,255 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:35,255 INFO L681 BuchiCegarLoop]: Abstraction has 151364 states and 274425 transitions. [2021-12-16 09:51:35,339 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 151364 states and 274425 transitions. [2021-12-16 09:51:36,204 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 151364 to 48936. [2021-12-16 09:51:36,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 48936 states, 48936 states have (on average 1.7720696419813635) internal successors, (86718), 48935 states have internal predecessors, (86718), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:36,325 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 48936 states to 48936 states and 86718 transitions. [2021-12-16 09:51:36,325 INFO L704 BuchiCegarLoop]: Abstraction has 48936 states and 86718 transitions. [2021-12-16 09:51:36,325 INFO L587 BuchiCegarLoop]: Abstraction has 48936 states and 86718 transitions. [2021-12-16 09:51:36,325 INFO L425 BuchiCegarLoop]: ======== Iteration 17============ [2021-12-16 09:51:36,325 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 48936 states and 86718 transitions. [2021-12-16 09:51:36,456 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45632 [2021-12-16 09:51:36,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:36,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:36,457 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:36,457 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:36,458 INFO L791 eck$LassoCheckResult]: Stem: 1084478#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1084479#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1085355#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1085356#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1084675#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1084273#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1084274#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1084317#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1084688#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1084337#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1084946#L2208 assume 0 == initPersonOnFloor_~floor#1; 1085892#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1083636#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1084150#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1085105#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1085667#L2000 assume !(0 == callOnFloor_~floorID#1); 1085668#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1084438#L2012-2 assume { :end_inline_callOnFloor } true; 1086039#L2352 assume { :end_inline_initPersonOnFloor } true; 1086038#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1086033#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1086030#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1086028#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 1086002#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1085998#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1085996#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1085992#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1085991#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1085990#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1085986#L2012-5 assume { :end_inline_callOnFloor } true; 1085985#L2352-1 assume { :end_inline_initPersonOnFloor } true; 1085984#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1085983#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1085982#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1085981#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1085947#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1084195#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1084868#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1084870#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1085980#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1085583#L1125 assume !(1 == ~doorState~0); 1083637#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1083638#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1084006#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1084007#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1085839#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1086049#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1086050#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1086045#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1086046#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1083731#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1083732#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1086054#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1086055#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1084969#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1084970#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1086151#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1085769#L868-5 assume { :end_inline_continueInDirection } true; 1084993#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1094246#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1094245#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1094242#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1094237#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1094226#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1094225#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1094224#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1093330#L1637-2 [2021-12-16 09:51:36,458 INFO L793 eck$LassoCheckResult]: Loop: 1093330#L1637-2 assume !false; 1093331#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1089269#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1089270#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1089262#L1645 assume 1 != cleanup_~tmp___0~6#1; 1089263#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1089240#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 1089242#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 1089214#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 1089215#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 1089203#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1089204#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1088846#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1088834#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1088835#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1088375#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1088376#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1095340#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1095338#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1095306#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1095300#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1095295#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1095293#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1095291#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1093784#L1125-3 assume !(1 == ~doorState~0); 1093785#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1099353#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1099352#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1099351#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1099349#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1099347#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1099346#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1099345#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1099344#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1099343#L480-3 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1099342#L486-3 assume !(~currentFloorID~0 < 0); 1099340#L501-3 assume !(~currentFloorID~0 < 0); 1099332#L514-3 assume ~currentFloorID~0 < 1; 1099327#L516-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1099326#L1932-38 assume !(0 == isFloorCalling_~floorID#1); 1099325#L1936-38 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1099226#L1959-38 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1099180#L520-3 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1099177#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1099173#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1099172#L907-3 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1096253#L912-3 timeShift_#t~ret46#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1096251#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1095286#L2511-8 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1095287#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1094529#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1094521#L868-9 assume { :end_inline_continueInDirection } true; 1094515#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1094512#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1094510#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1094511#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1094508#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1094509#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1094487#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1094488#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1093330#L1637-2 [2021-12-16 09:51:36,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:36,459 INFO L85 PathProgramCache]: Analyzing trace with hash 286482821, now seen corresponding path program 4 times [2021-12-16 09:51:36,459 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:36,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171220439] [2021-12-16 09:51:36,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:36,459 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:36,466 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:36,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:36,483 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:36,483 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171220439] [2021-12-16 09:51:36,483 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171220439] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:36,483 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:36,483 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:36,483 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1004714498] [2021-12-16 09:51:36,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:36,484 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:36,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:36,484 INFO L85 PathProgramCache]: Analyzing trace with hash -2073767639, now seen corresponding path program 1 times [2021-12-16 09:51:36,484 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:36,484 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1088543303] [2021-12-16 09:51:36,484 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:36,485 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:36,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:36,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:36,504 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:36,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1088543303] [2021-12-16 09:51:36,504 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1088543303] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:36,504 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:36,504 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:36,505 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [231288008] [2021-12-16 09:51:36,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:36,505 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:36,505 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:36,505 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:36,505 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:36,506 INFO L87 Difference]: Start difference. First operand 48936 states and 86718 transitions. cyclomatic complexity: 37783 Second operand has 5 states, 5 states have (on average 12.0) internal successors, (60), 5 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:37,410 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:37,410 INFO L93 Difference]: Finished difference Result 142910 states and 256985 transitions. [2021-12-16 09:51:37,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-12-16 09:51:37,429 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 142910 states and 256985 transitions. [2021-12-16 09:51:38,044 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 138968 [2021-12-16 09:51:38,435 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 142910 states to 142728 states and 256643 transitions. [2021-12-16 09:51:38,435 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 142728 [2021-12-16 09:51:38,529 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 142728 [2021-12-16 09:51:38,530 INFO L73 IsDeterministic]: Start isDeterministic. Operand 142728 states and 256643 transitions. [2021-12-16 09:51:38,612 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:38,612 INFO L681 BuchiCegarLoop]: Abstraction has 142728 states and 256643 transitions. [2021-12-16 09:51:38,692 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 142728 states and 256643 transitions. [2021-12-16 09:51:39,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 142728 to 62182. [2021-12-16 09:51:39,822 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 62182 states, 62182 states have (on average 1.7855810363127593) internal successors, (111031), 62181 states have internal predecessors, (111031), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:39,939 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 62182 states to 62182 states and 111031 transitions. [2021-12-16 09:51:39,939 INFO L704 BuchiCegarLoop]: Abstraction has 62182 states and 111031 transitions. [2021-12-16 09:51:39,939 INFO L587 BuchiCegarLoop]: Abstraction has 62182 states and 111031 transitions. [2021-12-16 09:51:39,939 INFO L425 BuchiCegarLoop]: ======== Iteration 18============ [2021-12-16 09:51:39,939 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 62182 states and 111031 transitions. [2021-12-16 09:51:40,139 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 58990 [2021-12-16 09:51:40,139 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:40,139 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:40,141 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:40,141 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:40,141 INFO L791 eck$LassoCheckResult]: Stem: 1276331#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1276332#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1277194#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1277195#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1276529#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1276128#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1276129#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1276172#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1276547#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1276193#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1276806#L2208 assume 0 == initPersonOnFloor_~floor#1; 1277702#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1275494#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1276002#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1276965#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1277482#L2000 assume !(0 == callOnFloor_~floorID#1); 1277483#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1276292#L2012-2 assume { :end_inline_callOnFloor } true; 1277831#L2352 assume { :end_inline_initPersonOnFloor } true; 1277830#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1277825#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1277822#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1277820#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 1277794#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1277790#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1277788#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1277784#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1277783#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1277782#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1277778#L2012-5 assume { :end_inline_callOnFloor } true; 1277777#L2352-1 assume { :end_inline_initPersonOnFloor } true; 1277776#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1277775#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1277774#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1277773#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1277752#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1276048#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1276730#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1276732#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1277771#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1277411#L1125 assume !(1 == ~doorState~0); 1275495#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1275496#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1275861#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1275862#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1277653#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1277845#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1277841#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1277842#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1277837#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1277838#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1277846#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1277847#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1275762#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1275763#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1275863#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1275864#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1277577#L868-5 assume { :end_inline_continueInDirection } true; 1276856#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1277859#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1277860#L3199 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1289587#L3200 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1289588#L281 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1289570#L3204 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1289569#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1289568#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1289566#L1637-2 [2021-12-16 09:51:40,142 INFO L793 eck$LassoCheckResult]: Loop: 1289566#L1637-2 assume !false; 1289564#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1289563#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1289562#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1289561#L1645 assume 1 != cleanup_~tmp___0~6#1; 1289556#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1289552#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 1289551#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 1289550#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 1289549#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 1289548#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1289546#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1289535#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1289520#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1289521#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1289273#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1289274#L1932-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1317854#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1317852#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1317846#L289-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1317840#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1317837#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1317835#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1317832#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1317829#L1125-3 assume !(1 == ~doorState~0); 1317830#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1331385#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1331386#L645-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1331911#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1296504#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1296505#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1330783#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1331910#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1331909#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1331908#L480-3 assume !(0 != stopRequestedInDirection_~tmp~2#1); 1331907#L486-3 assume !(~currentFloorID~0 < 0); 1331906#L501-3 assume !(~currentFloorID~0 < 0); 1331905#L514-3 assume ~currentFloorID~0 < 1; 1331904#L516-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1331903#L1932-38 assume !(0 == isFloorCalling_~floorID#1); 1331857#L1936-38 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1331834#L1959-38 stopRequestedInDirection_#t~ret12#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~1#1 := stopRequestedInDirection_#t~ret12#1;havoc stopRequestedInDirection_#t~ret12#1; 1331803#L520-3 assume 0 != stopRequestedInDirection_~tmp___3~1#1;stopRequestedInDirection_~retValue_acc~8#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1331801#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1331799#L1142-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1289741#L907-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1289742#L912-3 timeShift_#t~ret46#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1289628#L852-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1289627#L2511-8 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1289626#L856-12 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1282503#L862-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1289625#L868-9 assume { :end_inline_continueInDirection } true; 1289622#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1298343#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1298340#L3199-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1298341#L3200-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1298342#L281-5 __utac_acc__Specification1_spec__3_#t~ret118#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~3#1 := __utac_acc__Specification1_spec__3_#t~ret118#1;havoc __utac_acc__Specification1_spec__3_#t~ret118#1; 1289598#L3204-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~3#1;~landingButtons_spc1_0~0 := 0; 1289592#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1289567#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1289566#L1637-2 [2021-12-16 09:51:40,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:40,142 INFO L85 PathProgramCache]: Analyzing trace with hash 286482821, now seen corresponding path program 5 times [2021-12-16 09:51:40,142 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:40,142 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1742511896] [2021-12-16 09:51:40,143 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:40,143 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:40,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:40,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:40,164 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:40,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1742511896] [2021-12-16 09:51:40,164 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1742511896] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:40,164 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:40,164 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:40,164 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [981981089] [2021-12-16 09:51:40,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:40,165 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:40,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:40,165 INFO L85 PathProgramCache]: Analyzing trace with hash -793903961, now seen corresponding path program 1 times [2021-12-16 09:51:40,165 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:40,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1044356766] [2021-12-16 09:51:40,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:40,166 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:40,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:40,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:40,202 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:40,203 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1044356766] [2021-12-16 09:51:40,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1044356766] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:40,203 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:40,203 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-12-16 09:51:40,203 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1041394689] [2021-12-16 09:51:40,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:40,204 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:40,204 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:40,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-12-16 09:51:40,204 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2021-12-16 09:51:40,204 INFO L87 Difference]: Start difference. First operand 62182 states and 111031 transitions. cyclomatic complexity: 48851 Second operand has 8 states, 8 states have (on average 7.5) internal successors, (60), 8 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:41,849 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:41,849 INFO L93 Difference]: Finished difference Result 116120 states and 206395 transitions. [2021-12-16 09:51:41,849 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2021-12-16 09:51:41,850 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 116120 states and 206395 transitions. [2021-12-16 09:51:42,372 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 110938 [2021-12-16 09:51:43,114 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 116120 states to 115312 states and 205563 transitions. [2021-12-16 09:51:43,114 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 115312 [2021-12-16 09:51:43,202 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 115312 [2021-12-16 09:51:43,203 INFO L73 IsDeterministic]: Start isDeterministic. Operand 115312 states and 205563 transitions. [2021-12-16 09:51:43,268 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:43,268 INFO L681 BuchiCegarLoop]: Abstraction has 115312 states and 205563 transitions. [2021-12-16 09:51:43,336 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 115312 states and 205563 transitions. [2021-12-16 09:51:43,990 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 115312 to 65428. [2021-12-16 09:51:44,044 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 65428 states, 65428 states have (on average 1.7770373540380264) internal successors, (116268), 65427 states have internal predecessors, (116268), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:44,491 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 65428 states to 65428 states and 116268 transitions. [2021-12-16 09:51:44,491 INFO L704 BuchiCegarLoop]: Abstraction has 65428 states and 116268 transitions. [2021-12-16 09:51:44,491 INFO L587 BuchiCegarLoop]: Abstraction has 65428 states and 116268 transitions. [2021-12-16 09:51:44,491 INFO L425 BuchiCegarLoop]: ======== Iteration 19============ [2021-12-16 09:51:44,491 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 65428 states and 116268 transitions. [2021-12-16 09:51:44,650 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 62002 [2021-12-16 09:51:44,650 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:44,650 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:44,652 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:44,652 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:44,652 INFO L791 eck$LassoCheckResult]: Stem: 1454705#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1454706#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1455565#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1455566#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1454902#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1454499#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1454500#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1454546#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1454918#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1454566#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1455173#L2208 assume 0 == initPersonOnFloor_~floor#1; 1456088#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1453868#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1454374#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1455333#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1455867#L2000 assume !(0 == callOnFloor_~floorID#1); 1455868#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1454665#L2012-2 assume { :end_inline_callOnFloor } true; 1456231#L2352 assume { :end_inline_initPersonOnFloor } true; 1456230#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1456226#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1456223#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1456222#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 1456191#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1456187#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1456185#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1456181#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1456180#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1456179#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1456175#L2012-5 assume { :end_inline_callOnFloor } true; 1456174#L2352-1 assume { :end_inline_initPersonOnFloor } true; 1456173#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1456172#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1456171#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1456170#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1456145#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1454419#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1455098#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1455100#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1456168#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1455788#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1453869#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1453870#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1454234#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1454235#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1455731#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1456014#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1456255#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1456256#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1455488#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1455489#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1456238#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1456239#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1454135#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1454136#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1454236#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1454237#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1461492#L868-5 assume { :end_inline_continueInDirection } true; 1461491#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1461490#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1461489#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461488#L3213 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1461486#L3215 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1461482#L281-1 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1461474#L3219 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1461472#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1461471#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1461469#L1637-2 [2021-12-16 09:51:44,652 INFO L793 eck$LassoCheckResult]: Loop: 1461469#L1637-2 assume !false; 1461468#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1461467#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1461466#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1461465#L1645 assume 1 != cleanup_~tmp___0~6#1; 1461464#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1461461#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 1461459#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 1461457#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 1461452#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 1461447#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1461436#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1461429#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1461419#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1461420#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1461415#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1461416#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1461409#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1461410#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1461398#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1461399#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1461391#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1461392#L293-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1461377#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1461378#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1461368#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1461369#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1461360#L1125-3 assume !(1 == ~doorState~0); 1461358#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1461353#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1461354#L645-2 assume !(0 == ~currentFloorID~0); 1475116#L651-2 assume !(~currentFloorID~0 > 0); 1475115#L666-2 assume !(~currentFloorID~0 > 0); 1475114#L679-2 assume !(~currentFloorID~0 > 1); 1475113#L695-2 assume !(~currentFloorID~0 > 1); 1475112#L708-2 assume !(~currentFloorID~0 > 2); 1475111#L724-2 assume !(~currentFloorID~0 > 2); 1475110#L737-2 assume !(~currentFloorID~0 > 3); 1475109#L753-2 assume !(~currentFloorID~0 > 3); 1475108#L766-2 assume !(~currentFloorID~0 > 4); 1475107#L782-2 assume !(~currentFloorID~0 > 4);stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1475106#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1475105#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1475104#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1462766#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1475103#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1475102#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1475100#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1475101#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1475608#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1475607#L852-5 assume !(1 == ~currentHeading~0); 1475604#L862-15 assume !(0 == ~currentFloorID~0); 1456936#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1462741#L868-11 assume { :end_inline_continueInDirection } true; 1462601#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1461604#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1461605#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461601#L3213-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461584#L3228-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461580#L3243-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461576#L3258-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1461578#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1461470#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1461469#L1637-2 [2021-12-16 09:51:44,653 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:44,653 INFO L85 PathProgramCache]: Analyzing trace with hash 186724467, now seen corresponding path program 1 times [2021-12-16 09:51:44,653 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:44,653 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1269011706] [2021-12-16 09:51:44,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:44,654 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:44,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:44,670 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:44,670 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:44,670 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1269011706] [2021-12-16 09:51:44,671 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1269011706] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:44,671 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:44,671 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:44,671 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1198434817] [2021-12-16 09:51:44,671 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:44,671 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:44,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:44,672 INFO L85 PathProgramCache]: Analyzing trace with hash -1627700276, now seen corresponding path program 1 times [2021-12-16 09:51:44,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:44,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1249749001] [2021-12-16 09:51:44,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:44,672 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:44,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:44,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:44,687 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:44,687 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1249749001] [2021-12-16 09:51:44,688 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1249749001] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:44,688 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:44,688 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:44,688 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [493082425] [2021-12-16 09:51:44,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:44,688 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:44,688 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:44,689 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:44,689 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:44,689 INFO L87 Difference]: Start difference. First operand 65428 states and 116268 transitions. cyclomatic complexity: 50844 Second operand has 5 states, 5 states have (on average 12.6) internal successors, (63), 5 states have internal predecessors, (63), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:45,866 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:45,866 INFO L93 Difference]: Finished difference Result 144170 states and 258870 transitions. [2021-12-16 09:51:45,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-12-16 09:51:45,867 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 144170 states and 258870 transitions. [2021-12-16 09:51:46,844 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 139398 [2021-12-16 09:51:47,217 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 144170 states to 144170 states and 258870 transitions. [2021-12-16 09:51:47,217 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 144170 [2021-12-16 09:51:47,318 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 144170 [2021-12-16 09:51:47,319 INFO L73 IsDeterministic]: Start isDeterministic. Operand 144170 states and 258870 transitions. [2021-12-16 09:51:47,398 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:47,398 INFO L681 BuchiCegarLoop]: Abstraction has 144170 states and 258870 transitions. [2021-12-16 09:51:47,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 144170 states and 258870 transitions. [2021-12-16 09:51:48,469 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 144170 to 81332. [2021-12-16 09:51:48,534 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81332 states, 81332 states have (on average 1.793107264053509) internal successors, (145837), 81331 states have internal predecessors, (145837), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:48,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81332 states to 81332 states and 145837 transitions. [2021-12-16 09:51:48,678 INFO L704 BuchiCegarLoop]: Abstraction has 81332 states and 145837 transitions. [2021-12-16 09:51:48,678 INFO L587 BuchiCegarLoop]: Abstraction has 81332 states and 145837 transitions. [2021-12-16 09:51:48,678 INFO L425 BuchiCegarLoop]: ======== Iteration 20============ [2021-12-16 09:51:48,678 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81332 states and 145837 transitions. [2021-12-16 09:51:48,945 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 77906 [2021-12-16 09:51:48,946 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:48,946 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:48,949 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:48,950 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:48,950 INFO L791 eck$LassoCheckResult]: Stem: 1664321#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1664322#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1665167#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1665168#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1664519#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1664121#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1664122#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1664165#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1664532#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1664185#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1664783#L2208 assume 0 == initPersonOnFloor_~floor#1; 1665645#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1663487#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1663996#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1664939#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1665446#L2000 assume !(0 == callOnFloor_~floorID#1); 1665447#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1664283#L2012-2 assume { :end_inline_callOnFloor } true; 1665760#L2352 assume { :end_inline_initPersonOnFloor } true; 1665759#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1665755#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1665752#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1665750#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 1664447#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1663558#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1665715#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1665711#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1665710#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1665709#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1665705#L2012-5 assume { :end_inline_callOnFloor } true; 1665704#L2352-1 assume { :end_inline_initPersonOnFloor } true; 1665703#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1665702#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1665701#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1665700#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1665679#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1664041#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1664708#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1664710#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1665699#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1665381#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1663488#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1663489#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1663854#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1663855#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1665604#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1665774#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1665775#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1665771#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1665772#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1671731#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1671730#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1671729#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1663754#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1663755#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1663856#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1663857#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1671627#L868-5 assume { :end_inline_continueInDirection } true; 1671626#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1671625#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1671624#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671623#L3213 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1671621#L3215 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1671617#L281-1 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1671609#L3219 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1671607#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1671606#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1671601#L1637-2 [2021-12-16 09:51:48,950 INFO L793 eck$LassoCheckResult]: Loop: 1671601#L1637-2 assume !false; 1671602#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1671569#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1671570#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1671548#L1645 assume 1 != cleanup_~tmp___0~6#1; 1671549#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1671523#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 1671518#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 1671510#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 1671505#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 1671475#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1671476#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1671439#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1671431#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1671415#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1671416#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1671402#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1671403#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1671396#L1940-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1671395#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1671388#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1671389#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1671383#L293-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 1671384#L297-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1671369#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1671370#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1671341#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1671342#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1671323#L1125-3 assume !(1 == ~doorState~0); 1671148#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1671076#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1671077#L645-2 assume !(0 == ~currentFloorID~0); 1677817#L651-2 assume !(~currentFloorID~0 > 0); 1677816#L666-2 assume !(~currentFloorID~0 > 0); 1677815#L679-2 assume !(~currentFloorID~0 > 1); 1677814#L695-2 assume !(~currentFloorID~0 > 1); 1677813#L708-2 assume !(~currentFloorID~0 > 2); 1677812#L724-2 assume !(~currentFloorID~0 > 2); 1677811#L737-2 assume !(~currentFloorID~0 > 3); 1677810#L753-2 assume !(~currentFloorID~0 > 3); 1677809#L766-2 assume !(~currentFloorID~0 > 4); 1677808#L782-2 assume !(~currentFloorID~0 > 4);stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1677807#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1677806#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1677805#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1677710#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1677804#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1677803#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1677802#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1666826#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1677766#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1677763#L852-5 assume !(1 == ~currentHeading~0); 1672298#L862-15 assume !(0 == ~currentFloorID~0); 1666540#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1677691#L868-11 assume { :end_inline_continueInDirection } true; 1671766#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1677690#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1677689#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1677688#L3213-1 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 1677683#L3228-1 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671719#L3243-1 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671718#L3258-1 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 1671699#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1671700#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1671601#L1637-2 [2021-12-16 09:51:48,950 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:48,950 INFO L85 PathProgramCache]: Analyzing trace with hash 186724467, now seen corresponding path program 2 times [2021-12-16 09:51:48,951 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:48,951 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2070426443] [2021-12-16 09:51:48,951 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:48,951 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:48,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:48,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:48,976 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:48,976 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2070426443] [2021-12-16 09:51:48,976 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2070426443] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:48,976 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:48,976 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:48,976 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021040165] [2021-12-16 09:51:48,976 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:48,977 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:48,977 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:48,977 INFO L85 PathProgramCache]: Analyzing trace with hash -222261008, now seen corresponding path program 1 times [2021-12-16 09:51:48,977 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:48,977 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [312473358] [2021-12-16 09:51:48,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:48,979 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:48,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:49,008 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:49,008 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:49,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [312473358] [2021-12-16 09:51:49,009 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [312473358] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:49,009 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:49,009 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:51:49,009 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1625441817] [2021-12-16 09:51:49,009 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:49,009 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:49,009 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:49,010 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-12-16 09:51:49,010 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-12-16 09:51:49,010 INFO L87 Difference]: Start difference. First operand 81332 states and 145837 transitions. cyclomatic complexity: 64511 Second operand has 4 states, 4 states have (on average 16.0) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:50,312 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:51:50,313 INFO L93 Difference]: Finished difference Result 121954 states and 218287 transitions. [2021-12-16 09:51:50,313 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-12-16 09:51:50,316 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 121954 states and 218287 transitions. [2021-12-16 09:51:50,801 INFO L131 ngComponentsAnalysis]: Automaton has 11 accepting balls. 117842 [2021-12-16 09:51:51,159 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 121954 states to 121442 states and 217727 transitions. [2021-12-16 09:51:51,159 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 121442 [2021-12-16 09:51:51,236 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 121442 [2021-12-16 09:51:51,237 INFO L73 IsDeterministic]: Start isDeterministic. Operand 121442 states and 217727 transitions. [2021-12-16 09:51:51,299 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:51:51,300 INFO L681 BuchiCegarLoop]: Abstraction has 121442 states and 217727 transitions. [2021-12-16 09:51:51,348 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 121442 states and 217727 transitions. [2021-12-16 09:51:52,470 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 121442 to 103316. [2021-12-16 09:51:52,545 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103316 states, 103316 states have (on average 1.7931491734097333) internal successors, (185261), 103315 states have internal predecessors, (185261), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:51:52,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103316 states to 103316 states and 185261 transitions. [2021-12-16 09:51:52,728 INFO L704 BuchiCegarLoop]: Abstraction has 103316 states and 185261 transitions. [2021-12-16 09:51:52,728 INFO L587 BuchiCegarLoop]: Abstraction has 103316 states and 185261 transitions. [2021-12-16 09:51:52,728 INFO L425 BuchiCegarLoop]: ======== Iteration 21============ [2021-12-16 09:51:52,728 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 103316 states and 185261 transitions. [2021-12-16 09:51:53,346 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 99890 [2021-12-16 09:51:53,346 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:51:53,346 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:51:53,349 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:53,349 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:51:53,349 INFO L791 eck$LassoCheckResult]: Stem: 1867620#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1867621#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret86#1, main_~retValue_acc~14#1, main_~tmp~16#1;havoc main_~retValue_acc~14#1;havoc main_~tmp~16#1;assume { :begin_inline_select_helpers } true; 1868500#L3127 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1868501#L3120 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~25#1;havoc valid_product_~retValue_acc~25#1;valid_product_~retValue_acc~25#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~25#1; 1867823#L3135 main_#t~ret86#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~16#1 := main_#t~ret86#1;havoc main_#t~ret86#1; 1867416#L1836 assume 0 != main_~tmp~16#1;assume { :begin_inline_setup } true; 1867417#L1805 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1867460#L3154 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret79#1, bigMacCall_~tmp~13#1;havoc bigMacCall_~tmp~13#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1867837#L3030 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1867479#L3055 bigMacCall_#t~ret79#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~13#1 := bigMacCall_#t~ret79#1;havoc bigMacCall_#t~ret79#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~13#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1868098#L2208 assume 0 == initPersonOnFloor_~floor#1; 1869030#L2209 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1866781#L2316-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1867293#L3161 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1868258#L3173-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1868811#L2000 assume !(0 == callOnFloor_~floorID#1); 1868812#L2003 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1867580#L2012-2 assume { :end_inline_callOnFloor } true; 1869172#L2352 assume { :end_inline_initPersonOnFloor } true; 1869171#L1610 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret76#1, angelinaCall_~tmp~10#1;havoc angelinaCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~22#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~22#1; 1869167#L3030-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~22#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~22#1; 1869164#L3055-1 angelinaCall_#t~ret76#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~10#1 := angelinaCall_#t~ret76#1;havoc angelinaCall_#t~ret76#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1869163#L2208-1 assume 0 == initPersonOnFloor_~floor#1; 1869132#L2209-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1869128#L2316-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1869126#L3161-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1869122#L3173-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1869121#L2000-2 assume !(0 == callOnFloor_~floorID#1); 1869120#L2003-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1869116#L2012-5 assume { :end_inline_callOnFloor } true; 1869115#L2352-1 assume { :end_inline_initPersonOnFloor } true; 1869114#L1577 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret80#1, cleanup_#t~ret81#1, cleanup_~i~1#1, cleanup_~tmp~14#1, cleanup_~tmp___0~6#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~1#1;havoc cleanup_~tmp~14#1;havoc cleanup_~tmp___0~6#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1869113#L1932 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1869112#L1959 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1869111#L885 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1869088#L289 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1867338#L310 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1868022#L892 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1868024#L897 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1869110#L1034 assume !(0 != timeShift_~tmp___9~2#1); 1868731#L1125 assume 1 == ~doorState~0;~doorState~0 := 0; 1866782#L1125-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1866783#L476 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1867149#L2511 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1867150#L480 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1868977#L798 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1876122#L1133 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1875606#L907 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~11#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1876120#L912 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1876119#L476-1 assume !(1 == stopRequestedInDirection_~dir#1); 1876118#L645-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1876117#L798-1 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1869098#L1142 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1867047#L852-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1867048#L2511-4 continueInDirection_#t~ret21#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~3#1 := continueInDirection_#t~ret21#1;havoc continueInDirection_#t~ret21#1; 1867151#L856-6 assume 0 != continueInDirection_~tmp~3#1;~currentHeading~0 := 0; 1867152#L862-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1875592#L868-5 assume { :end_inline_continueInDirection } true; 1875588#L1142-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1875586#L272 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1875584#L3199 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1875582#L3213 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1875579#L3215 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1875574#L281-1 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1875561#L3219 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1875550#L3259 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1875548#L1157 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 0; 1875546#L1637-2 [2021-12-16 09:51:53,349 INFO L793 eck$LassoCheckResult]: Loop: 1875546#L1637-2 assume !false; 1875545#L1638 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1875544#L1641 assume cleanup_~i~1#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 1875543#L143 cleanup_#t~ret80#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~6#1 := cleanup_#t~ret80#1;havoc cleanup_#t~ret80#1; 1875542#L1645 assume 1 != cleanup_~tmp___0~6#1; 1875541#L1645-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret9#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~1#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~1#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret4#1, anyStopRequested_#t~ret5#1, anyStopRequested_#t~ret6#1, anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~0#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~0#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1875539#L1932-21 assume !(0 == isFloorCalling_~floorID#1); 1875540#L1936-21 assume !(1 == isFloorCalling_~floorID#1); 1876668#L1940-21 assume !(2 == isFloorCalling_~floorID#1); 1876607#L1944-21 assume !(3 == isFloorCalling_~floorID#1); 1876606#L1948-21 assume !(4 == isFloorCalling_~floorID#1);isFloorCalling_~retValue_acc~15#1 := 0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1876605#L1959-21 anyStopRequested_#t~ret4#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret4#1;havoc anyStopRequested_#t~ret4#1; 1876516#L380 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 1876505#L444 isIdle_#t~ret9#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~1#1 := isIdle_#t~ret9#1;havoc isIdle_#t~ret9#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~1#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 1876504#L457 cleanup_#t~ret81#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~14#1 := cleanup_#t~ret81#1;havoc cleanup_#t~ret81#1; 1876503#L1657 assume !(0 != cleanup_~tmp~14#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret36#1, timeShift_#t~ret37#1, timeShift_#t~ret38#1, timeShift_#t~ret39#1, timeShift_#t~ret40#1, timeShift_#t~ret41#1, timeShift_#t~ret42#1, timeShift_#t~ret43#1, timeShift_#t~ret44#1, timeShift_#t~ret45#1, timeShift_#t~ret46#1, timeShift_~tmp~6#1, timeShift_~tmp___0~4#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~6#1;havoc timeShift_~tmp___0~4#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1, stopRequestedAtCurrentFloor_#t~ret23#1, stopRequestedAtCurrentFloor_~retValue_acc~10#1, stopRequestedAtCurrentFloor_~tmp~4#1, stopRequestedAtCurrentFloor_~tmp___0~2#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~10#1;havoc stopRequestedAtCurrentFloor_~tmp~4#1;havoc stopRequestedAtCurrentFloor_~tmp___0~2#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~15#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~15#1; 1876436#L1932-26 assume !(0 == isFloorCalling_~floorID#1); 1876429#L1936-26 assume !(1 == isFloorCalling_~floorID#1); 1876395#L1940-26 assume !(2 == isFloorCalling_~floorID#1); 1876394#L1944-26 assume 3 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~15#1 := ~calls_3~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~15#1; 1876385#L1959-26 stopRequestedAtCurrentFloor_#t~ret22#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~2#1 := stopRequestedAtCurrentFloor_#t~ret22#1;havoc stopRequestedAtCurrentFloor_#t~ret22#1; 1876368#L885-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~2#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 1876335#L289-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1876327#L293-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 1876322#L297-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1876314#L310-1 stopRequestedAtCurrentFloor_#t~ret23#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~4#1 := stopRequestedAtCurrentFloor_#t~ret23#1;havoc stopRequestedAtCurrentFloor_#t~ret23#1; 1876307#L892-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~4#1);stopRequestedAtCurrentFloor_~retValue_acc~10#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~10#1; 1876297#L897-1 timeShift_#t~ret36#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret36#1;havoc timeShift_#t~ret36#1; 1876293#L1034-2 assume !(0 != timeShift_~tmp___9~2#1); 1876282#L1125-3 assume !(1 == ~doorState~0); 1876276#L1125-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1876268#L476-2 assume !(1 == stopRequestedInDirection_~dir#1); 1876253#L645-2 assume !(0 == ~currentFloorID~0); 1876251#L651-2 assume !(~currentFloorID~0 > 0); 1876201#L666-2 assume !(~currentFloorID~0 > 0); 1876200#L679-2 assume !(~currentFloorID~0 > 1); 1876177#L695-2 assume !(~currentFloorID~0 > 1); 1876176#L708-2 assume !(~currentFloorID~0 > 2); 1876175#L724-2 assume !(~currentFloorID~0 > 2); 1876174#L737-2 assume !(~currentFloorID~0 > 3); 1876173#L753-2 assume !(~currentFloorID~0 > 3); 1876172#L766-2 assume !(~currentFloorID~0 > 4); 1876171#L782-2 assume !(~currentFloorID~0 > 4);stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1876170#L798-2 timeShift_#t~ret43#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret43#1;havoc timeShift_#t~ret43#1; 1876169#L1133-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~11#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~11#1; 1876168#L907-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~11#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~11#1; 1875439#L912-2 timeShift_#t~ret44#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret44#1;havoc timeShift_#t~ret44#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret10#1, stopRequestedInDirection_#t~ret11#1, stopRequestedInDirection_#t~ret12#1, stopRequestedInDirection_#t~ret13#1, stopRequestedInDirection_#t~ret14#1, stopRequestedInDirection_#t~ret15#1, stopRequestedInDirection_#t~ret16#1, stopRequestedInDirection_#t~ret17#1, stopRequestedInDirection_#t~ret18#1, stopRequestedInDirection_#t~ret19#1, stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~8#1, stopRequestedInDirection_~tmp~2#1, stopRequestedInDirection_~tmp___0~1#1, stopRequestedInDirection_~tmp___1~1#1, stopRequestedInDirection_~tmp___2~1#1, stopRequestedInDirection_~tmp___3~1#1, stopRequestedInDirection_~tmp___4~0#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~8#1;havoc stopRequestedInDirection_~tmp~2#1;havoc stopRequestedInDirection_~tmp___0~1#1;havoc stopRequestedInDirection_~tmp___1~1#1;havoc stopRequestedInDirection_~tmp___2~1#1;havoc stopRequestedInDirection_~tmp___3~1#1;havoc stopRequestedInDirection_~tmp___4~0#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1876166#L476-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~17#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~17#1;isTopFloor_~retValue_acc~17#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~17#1; 1876164#L2511-7 stopRequestedInDirection_#t~ret10#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~2#1 := stopRequestedInDirection_#t~ret10#1;havoc stopRequestedInDirection_#t~ret10#1; 1876163#L480-3 assume 0 != stopRequestedInDirection_~tmp~2#1;stopRequestedInDirection_~retValue_acc~8#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~8#1; 1873287#L798-3 timeShift_#t~ret45#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret45#1;havoc timeShift_#t~ret45#1; 1876129#L1142-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret21#1, continueInDirection_~dir#1, continueInDirection_~tmp~3#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~3#1;~currentHeading~0 := continueInDirection_~dir#1; 1876123#L852-5 assume !(1 == ~currentHeading~0); 1875797#L862-15 assume !(0 == ~currentFloorID~0); 1873906#L862-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1875590#L868-11 assume { :end_inline_continueInDirection } true; 1875587#L1142-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret117#1, __utac_acc__Specification1_spec__3_#t~ret118#1, __utac_acc__Specification1_spec__3_#t~ret119#1, __utac_acc__Specification1_spec__3_#t~ret120#1, __utac_acc__Specification1_spec__3_#t~ret121#1, __utac_acc__Specification1_spec__3_#t~ret122#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~22#1, __utac_acc__Specification1_spec__3_~tmp___0~10#1, __utac_acc__Specification1_spec__3_~tmp___1~8#1, __utac_acc__Specification1_spec__3_~tmp___2~6#1, __utac_acc__Specification1_spec__3_~tmp___3~5#1, __utac_acc__Specification1_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~22#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~10#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1875585#L272-1 __utac_acc__Specification1_spec__3_#t~ret117#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~22#1 := __utac_acc__Specification1_spec__3_#t~ret117#1;havoc __utac_acc__Specification1_spec__3_#t~ret117#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~22#1; 1875583#L3199-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 1875580#L3213-1 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 1875578#L3215-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~2#1;havoc areDoorsOpen_~retValue_acc~2#1;areDoorsOpen_~retValue_acc~2#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~2#1; 1875573#L281-6 __utac_acc__Specification1_spec__3_#t~ret119#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~5#1 := __utac_acc__Specification1_spec__3_#t~ret119#1;havoc __utac_acc__Specification1_spec__3_#t~ret119#1; 1875557#L3219-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~5#1;~landingButtons_spc1_1~0 := 0; 1875549#L3259-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1875547#L1157-1 assume { :end_inline_timeShift } true;cleanup_~i~1#1 := 1 + cleanup_~i~1#1; 1875546#L1637-2 [2021-12-16 09:51:53,350 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:53,350 INFO L85 PathProgramCache]: Analyzing trace with hash 186724467, now seen corresponding path program 3 times [2021-12-16 09:51:53,350 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:53,350 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1009221531] [2021-12-16 09:51:53,350 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:53,350 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:53,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:53,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:53,372 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:53,373 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1009221531] [2021-12-16 09:51:53,373 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1009221531] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:53,373 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:53,373 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:51:53,373 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1684940806] [2021-12-16 09:51:53,373 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:53,373 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:51:53,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:51:53,374 INFO L85 PathProgramCache]: Analyzing trace with hash -315921483, now seen corresponding path program 1 times [2021-12-16 09:51:53,374 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:51:53,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125961011] [2021-12-16 09:51:53,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:51:53,375 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:51:53,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:51:53,398 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:51:53,399 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:51:53,399 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125961011] [2021-12-16 09:51:53,399 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125961011] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:51:53,399 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:51:53,399 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:51:53,399 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1163703286] [2021-12-16 09:51:53,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:51:53,400 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:51:53,400 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:51:53,400 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:51:53,400 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:51:53,401 INFO L87 Difference]: Start difference. First operand 103316 states and 185261 transitions. cyclomatic complexity: 81951 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)