./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version e04fb08f Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-e04fb08 [2022-11-16 12:42:06,433 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-16 12:42:06,436 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-16 12:42:06,465 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-16 12:42:06,465 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-16 12:42:06,469 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-16 12:42:06,472 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-16 12:42:06,477 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-16 12:42:06,480 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-16 12:42:06,485 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-16 12:42:06,487 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-16 12:42:06,490 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-16 12:42:06,490 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-16 12:42:06,493 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-16 12:42:06,495 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-16 12:42:06,496 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-16 12:42:06,497 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-16 12:42:06,498 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-16 12:42:06,500 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-16 12:42:06,502 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-16 12:42:06,503 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-16 12:42:06,505 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-16 12:42:06,506 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-16 12:42:06,507 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-16 12:42:06,511 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-16 12:42:06,511 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-16 12:42:06,512 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-16 12:42:06,513 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-16 12:42:06,513 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-16 12:42:06,514 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-16 12:42:06,515 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-16 12:42:06,516 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-16 12:42:06,517 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-16 12:42:06,517 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-16 12:42:06,519 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-16 12:42:06,519 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-16 12:42:06,520 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-16 12:42:06,520 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-16 12:42:06,520 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-16 12:42:06,521 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-16 12:42:06,522 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-16 12:42:06,527 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-16 12:42:06,568 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-16 12:42:06,568 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-16 12:42:06,569 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-16 12:42:06,569 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-16 12:42:06,571 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-16 12:42:06,571 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-16 12:42:06,572 INFO L138 SettingsManager]: * Use SBE=true [2022-11-16 12:42:06,572 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-16 12:42:06,572 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-16 12:42:06,573 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-16 12:42:06,574 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-16 12:42:06,574 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-16 12:42:06,574 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-16 12:42:06,575 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-16 12:42:06,575 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-16 12:42:06,575 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-16 12:42:06,575 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-16 12:42:06,576 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-16 12:42:06,576 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-16 12:42:06,576 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-16 12:42:06,576 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-16 12:42:06,577 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-16 12:42:06,577 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-16 12:42:06,579 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-16 12:42:06,579 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-16 12:42:06,579 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-16 12:42:06,580 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-16 12:42:06,580 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-16 12:42:06,580 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-16 12:42:06,581 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-16 12:42:06,581 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-16 12:42:06,582 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-16 12:42:06,582 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8190dbbeca15ebdc96e247bb91a06680a00a60089c25180495df59d4a11849af [2022-11-16 12:42:06,896 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-16 12:42:06,939 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-16 12:42:06,941 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-16 12:42:06,942 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-16 12:42:06,943 INFO L275 PluginConnector]: CDTParser initialized [2022-11-16 12:42:06,945 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/../../sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2022-11-16 12:42:07,019 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/data/b4c8a5b42/9787d1328bc042c1af226c128407b3d9/FLAG49cc4ed37 [2022-11-16 12:42:07,685 INFO L306 CDTParser]: Found 1 translation units. [2022-11-16 12:42:07,686 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c [2022-11-16 12:42:07,704 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/data/b4c8a5b42/9787d1328bc042c1af226c128407b3d9/FLAG49cc4ed37 [2022-11-16 12:42:07,919 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/data/b4c8a5b42/9787d1328bc042c1af226c128407b3d9 [2022-11-16 12:42:07,921 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-16 12:42:07,923 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-16 12:42:07,924 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-16 12:42:07,925 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-16 12:42:07,928 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-16 12:42:07,931 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:42:07" (1/1) ... [2022-11-16 12:42:07,932 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@55166b47 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:07, skipping insertion in model container [2022-11-16 12:42:07,934 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.11 12:42:07" (1/1) ... [2022-11-16 12:42:07,941 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-16 12:42:08,037 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-16 12:42:08,235 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c[1545,1558] [2022-11-16 12:42:08,651 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:42:08,668 INFO L203 MainTranslator]: Completed pre-run [2022-11-16 12:42:08,695 WARN L229 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/sv-benchmarks/c/product-lines/elevator_spec2_product01.cil.c[1545,1558] [2022-11-16 12:42:08,799 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-16 12:42:08,822 INFO L208 MainTranslator]: Completed translation [2022-11-16 12:42:08,823 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08 WrapperNode [2022-11-16 12:42:08,823 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-16 12:42:08,824 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-16 12:42:08,824 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-16 12:42:08,824 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-16 12:42:08,833 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:08,860 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,075 INFO L138 Inliner]: procedures = 88, calls = 328, calls flagged for inlining = 181, calls inlined = 228, statements flattened = 7559 [2022-11-16 12:42:09,076 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-16 12:42:09,077 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-16 12:42:09,077 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-16 12:42:09,077 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-16 12:42:09,087 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,087 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,111 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,111 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,190 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,239 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,251 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,268 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,301 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-16 12:42:09,302 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-16 12:42:09,302 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-16 12:42:09,303 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-16 12:42:09,304 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (1/1) ... [2022-11-16 12:42:09,311 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-16 12:42:09,322 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/z3 [2022-11-16 12:42:09,336 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-16 12:42:09,364 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ed9d91d6-8cb1-451e-8303-35f7b4aec2f7/bin/uautomizer-tPACEb0tL8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-16 12:42:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-16 12:42:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-16 12:42:09,391 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-16 12:42:09,391 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-16 12:42:09,575 INFO L235 CfgBuilder]: Building ICFG [2022-11-16 12:42:09,577 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-16 12:42:13,563 INFO L276 CfgBuilder]: Performing block encoding [2022-11-16 12:42:13,593 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-16 12:42:13,593 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-16 12:42:13,600 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:42:13 BoogieIcfgContainer [2022-11-16 12:42:13,600 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-16 12:42:13,601 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-16 12:42:13,601 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-16 12:42:13,605 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-16 12:42:13,606 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:42:13,606 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 16.11 12:42:07" (1/3) ... [2022-11-16 12:42:13,607 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@15be756c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:42:13, skipping insertion in model container [2022-11-16 12:42:13,607 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:42:13,608 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.11 12:42:08" (2/3) ... [2022-11-16 12:42:13,608 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@15be756c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.11 12:42:13, skipping insertion in model container [2022-11-16 12:42:13,608 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-16 12:42:13,608 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.11 12:42:13" (3/3) ... [2022-11-16 12:42:13,610 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product01.cil.c [2022-11-16 12:42:13,715 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-16 12:42:13,715 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-16 12:42:13,716 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-16 12:42:13,716 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-16 12:42:13,716 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-16 12:42:13,716 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-16 12:42:13,716 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-16 12:42:13,716 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-16 12:42:13,731 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2279 states, 2278 states have (on average 1.8770851624231781) internal successors, (4276), 2278 states have internal predecessors, (4276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:13,841 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2022-11-16 12:42:13,841 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:13,841 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:13,870 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:13,870 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:13,870 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-16 12:42:13,876 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2279 states, 2278 states have (on average 1.8770851624231781) internal successors, (4276), 2278 states have internal predecessors, (4276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:13,908 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1123 [2022-11-16 12:42:13,909 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:13,909 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:13,915 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:13,915 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:13,930 INFO L748 eck$LassoCheckResult]: Stem: 522#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 2177#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 756#L2643true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1168#L2636true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1269#L2651true main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 508#L1088true assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 220#L1060true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1958#L209true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 2018#L104true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1655#L129true bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 979#L3009true assume 0 == initPersonOnFloor_~floor#1; 1490#L3010true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1196#L3117-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1964#L2801true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 604#L2813-2true assume { :end_inline_callOnFloor } true; 685#L3153true assume { :end_inline_initPersonOnFloor } true; 107#L860true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 653#L2738true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 2258#L2765true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 2270#L1925true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 752#L1937true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 773#L2073true assume !(0 != timeShift_~tmp___9~2#1); 363#L2164true assume !(1 == ~doorState~0); 1343#L2164-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 23#L1516true assume !(1 == stopRequestedInDirection_~dir#1); 1753#L1685true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 2082#L1838true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 954#L2172true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 75#L1892true assume !(1 == ~currentHeading~0); 1591#L1902true assume !(0 == ~currentFloorID~0); 98#L1902-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 956#L1908-1true assume { :end_inline_continueInDirection } true; 1163#L2181-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 638#L1312true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 888#L254true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2017#L255true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1549#L1321true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1036#L259true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1078#L314true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 978#L2196true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1117#L890-2true [2022-11-16 12:42:13,939 INFO L750 eck$LassoCheckResult]: Loop: 1117#L890-2true assume !false; 783#L891true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1721#L894true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1664#L1179true cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 662#L898true assume 1 != cleanup_~tmp___0~1#1; 952#L898-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1994#L2738-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 2188#L2765-21true anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 830#L1420true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1634#L1484true isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1788#L1497true cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 2015#L910true assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 213#L2738-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1172#L2765-26true stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1432#L1925-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 483#L1937-1true timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1653#L2073-2true assume !(0 != timeShift_~tmp___9~2#1); 557#L2164-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1900#L2164-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1200#L1516-2true assume !(1 == stopRequestedInDirection_~dir#1); 678#L1685-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 166#L1838-2true timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1776#L2172-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1937#L1892-3true assume !(1 == ~currentHeading~0); 1493#L1902-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 649#L1902-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 876#L1908-7true assume { :end_inline_continueInDirection } true; 1996#L2181-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1956#L1312-1true __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 267#L254-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1578#L255-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1842#L1321-5true __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1662#L259-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 459#L314-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 491#L2196-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1117#L890-2true [2022-11-16 12:42:13,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:13,945 INFO L85 PathProgramCache]: Analyzing trace with hash 846433161, now seen corresponding path program 1 times [2022-11-16 12:42:13,955 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:13,956 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [965467869] [2022-11-16 12:42:13,956 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:13,957 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:14,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:14,363 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:14,364 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:14,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [965467869] [2022-11-16 12:42:14,372 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [965467869] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:14,372 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:14,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:14,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445138005] [2022-11-16 12:42:14,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:14,380 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:14,382 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:14,383 INFO L85 PathProgramCache]: Analyzing trace with hash 1611523527, now seen corresponding path program 1 times [2022-11-16 12:42:14,383 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:14,384 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1038641652] [2022-11-16 12:42:14,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:14,385 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:14,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:14,610 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:14,610 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:14,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1038641652] [2022-11-16 12:42:14,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1038641652] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:14,611 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:14,611 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:42:14,611 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [871189005] [2022-11-16 12:42:14,611 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:14,613 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:14,614 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:14,643 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:42:14,644 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:42:14,650 INFO L87 Difference]: Start difference. First operand has 2279 states, 2278 states have (on average 1.8770851624231781) internal successors, (4276), 2278 states have internal predecessors, (4276), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:15,181 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:15,181 INFO L93 Difference]: Finished difference Result 4090 states and 7575 transitions. [2022-11-16 12:42:15,183 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4090 states and 7575 transitions. [2022-11-16 12:42:15,220 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2029 [2022-11-16 12:42:15,257 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4090 states to 3982 states and 7463 transitions. [2022-11-16 12:42:15,258 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 3982 [2022-11-16 12:42:15,266 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 3982 [2022-11-16 12:42:15,266 INFO L73 IsDeterministic]: Start isDeterministic. Operand 3982 states and 7463 transitions. [2022-11-16 12:42:15,283 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:15,284 INFO L218 hiAutomatonCegarLoop]: Abstraction has 3982 states and 7463 transitions. [2022-11-16 12:42:15,312 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3982 states and 7463 transitions. [2022-11-16 12:42:15,454 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3982 to 2260. [2022-11-16 12:42:15,460 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2260 states, 2260 states have (on average 1.879203539823009) internal successors, (4247), 2259 states have internal predecessors, (4247), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:15,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2260 states to 2260 states and 4247 transitions. [2022-11-16 12:42:15,473 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2022-11-16 12:42:15,474 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:42:15,479 INFO L428 stractBuchiCegarLoop]: Abstraction has 2260 states and 4247 transitions. [2022-11-16 12:42:15,480 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-16 12:42:15,480 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2260 states and 4247 transitions. [2022-11-16 12:42:15,497 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1125 [2022-11-16 12:42:15,497 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:15,498 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:15,503 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:15,503 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:15,504 INFO L748 eck$LassoCheckResult]: Stem: 7403#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 7404#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 7741#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7742#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 8172#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 7380#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 6894#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 6895#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 8616#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 6845#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7979#L3009 assume 0 == initPersonOnFloor_~floor#1; 7980#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6890#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 8199#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7345#L2813-2 assume { :end_inline_callOnFloor } true; 7533#L3153 assume { :end_inline_initPersonOnFloor } true; 6651#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 6652#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 6449#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 8657#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 8596#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 7601#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 6855#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 6857#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 8659#L2073 assume !(0 != timeShift_~tmp___9~2#1); 7143#L2164 assume !(1 == ~doorState~0); 7144#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6456#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 6457#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 6831#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 7960#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 6587#L1892 assume !(1 == ~currentHeading~0); 6588#L1902 assume !(0 == ~currentFloorID~0); 6636#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6637#L1908-1 assume { :end_inline_continueInDirection } true; 7940#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 7584#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 7585#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 7886#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8436#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 8041#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 6625#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7978#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7353#L890-2 [2022-11-16 12:42:15,505 INFO L750 eck$LassoCheckResult]: Loop: 7353#L890-2 assume !false; 7770#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7771#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 8501#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 7621#L898 assume 1 != cleanup_~tmp___0~1#1; 7622#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 7958#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 7199#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 7825#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 7138#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 8485#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 8557#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 6878#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 6730#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 8177#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 6917#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 6918#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 7976#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 7977#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 8658#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 7462#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 7463#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 8204#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 7644#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 6774#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 6782#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 8551#L1892-3 assume !(1 == ~currentHeading~0); 8406#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7283#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7599#L1908-7 assume { :end_inline_continueInDirection } true; 7066#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 8615#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 6975#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 6976#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 8452#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 8500#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 6965#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7302#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7353#L890-2 [2022-11-16 12:42:15,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:15,506 INFO L85 PathProgramCache]: Analyzing trace with hash -788278422, now seen corresponding path program 1 times [2022-11-16 12:42:15,507 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:15,507 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639307304] [2022-11-16 12:42:15,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:15,507 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:15,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:15,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:15,658 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:15,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639307304] [2022-11-16 12:42:15,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639307304] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:15,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:15,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:15,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2013672252] [2022-11-16 12:42:15,664 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:15,665 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:15,666 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:15,667 INFO L85 PathProgramCache]: Analyzing trace with hash -468858600, now seen corresponding path program 1 times [2022-11-16 12:42:15,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:15,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325864576] [2022-11-16 12:42:15,673 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:15,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:15,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:15,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:15,787 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:15,787 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325864576] [2022-11-16 12:42:15,788 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325864576] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:15,788 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:15,788 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:15,788 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1589748313] [2022-11-16 12:42:15,789 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:15,789 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:15,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:15,790 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:42:15,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:42:15,790 INFO L87 Difference]: Start difference. First operand 2260 states and 4247 transitions. cyclomatic complexity: 1988 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:18,425 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:18,426 INFO L93 Difference]: Finished difference Result 21077 states and 39521 transitions. [2022-11-16 12:42:18,426 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21077 states and 39521 transitions. [2022-11-16 12:42:18,633 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13958 [2022-11-16 12:42:18,769 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21077 states to 21077 states and 39521 transitions. [2022-11-16 12:42:18,770 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21077 [2022-11-16 12:42:18,801 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21077 [2022-11-16 12:42:18,801 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21077 states and 39521 transitions. [2022-11-16 12:42:18,835 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:18,835 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21077 states and 39521 transitions. [2022-11-16 12:42:18,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21077 states and 39521 transitions. [2022-11-16 12:42:19,054 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21077 to 4472. [2022-11-16 12:42:19,063 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4472 states, 4472 states have (on average 1.878577817531306) internal successors, (8401), 4471 states have internal predecessors, (8401), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:19,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4472 states to 4472 states and 8401 transitions. [2022-11-16 12:42:19,080 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2022-11-16 12:42:19,080 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-11-16 12:42:19,081 INFO L428 stractBuchiCegarLoop]: Abstraction has 4472 states and 8401 transitions. [2022-11-16 12:42:19,081 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-16 12:42:19,082 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4472 states and 8401 transitions. [2022-11-16 12:42:19,105 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2256 [2022-11-16 12:42:19,105 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:19,105 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:19,108 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:19,108 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:19,109 INFO L748 eck$LassoCheckResult]: Stem: 30801#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 30802#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 31150#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 31151#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 31612#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 30778#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 30285#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 30286#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 32117#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 30235#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 31406#L3009 assume 0 == initPersonOnFloor_~floor#1; 31407#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 30281#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 31641#L2801 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 32118#L2813-2 assume { :end_inline_callOnFloor } true; 31055#L3153 assume { :end_inline_initPersonOnFloor } true; 31056#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 31007#L2738 assume !(0 == isFloorCalling_~floorID#1); 31009#L2742 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 32355#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 32354#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 32352#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 32348#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 32347#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 32346#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 32344#L2073 assume !(0 != timeShift_~tmp___9~2#1); 32343#L2164 assume !(1 == ~doorState~0); 32342#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 32341#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 32337#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 32304#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 31385#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 29972#L1892 assume !(1 == ~currentHeading~0); 29973#L1902 assume !(0 == ~currentFloorID~0); 30022#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 30023#L1908-1 assume { :end_inline_continueInDirection } true; 32266#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 32265#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 32264#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 32263#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 32260#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 32253#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 32244#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 32242#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 32241#L890-2 [2022-11-16 12:42:19,109 INFO L750 eck$LassoCheckResult]: Loop: 32241#L890-2 assume !false; 32240#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 32239#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 32238#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 32237#L898 assume 1 != cleanup_~tmp___0~1#1; 32195#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 32125#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 32126#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 31240#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 31241#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 32198#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 32197#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 30268#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 30270#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 33426#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 33425#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 33423#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 33419#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 33418#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 33417#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 33415#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 33414#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 33413#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 33411#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 31048#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 30162#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 33283#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 33282#L1892-3 assume !(1 == ~currentHeading~0); 31873#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30681#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 33276#L1908-7 assume { :end_inline_continueInDirection } true; 33274#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 33272#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 33270#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 33269#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 33268#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 33265#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 33256#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 32243#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 32241#L890-2 [2022-11-16 12:42:19,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:19,110 INFO L85 PathProgramCache]: Analyzing trace with hash 260318243, now seen corresponding path program 1 times [2022-11-16 12:42:19,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:19,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [333663338] [2022-11-16 12:42:19,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:19,111 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:19,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:19,187 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:19,187 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:19,187 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [333663338] [2022-11-16 12:42:19,188 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [333663338] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:19,188 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:19,188 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:19,188 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1709922434] [2022-11-16 12:42:19,189 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:19,189 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:19,189 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:19,190 INFO L85 PathProgramCache]: Analyzing trace with hash 340613729, now seen corresponding path program 1 times [2022-11-16 12:42:19,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:19,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1005189811] [2022-11-16 12:42:19,190 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:19,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:19,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:19,286 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:19,286 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:19,286 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1005189811] [2022-11-16 12:42:19,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1005189811] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:19,287 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:19,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:19,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2084253237] [2022-11-16 12:42:19,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:19,288 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:19,288 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:19,289 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:42:19,289 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:42:19,289 INFO L87 Difference]: Start difference. First operand 4472 states and 8401 transitions. cyclomatic complexity: 3930 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:23,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:23,471 INFO L93 Difference]: Finished difference Result 15732 states and 29470 transitions. [2022-11-16 12:42:23,471 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15732 states and 29470 transitions. [2022-11-16 12:42:23,640 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8431 [2022-11-16 12:42:23,712 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15732 states to 15732 states and 29470 transitions. [2022-11-16 12:42:23,712 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15732 [2022-11-16 12:42:23,730 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15732 [2022-11-16 12:42:23,730 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15732 states and 29470 transitions. [2022-11-16 12:42:23,749 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:23,749 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15732 states and 29470 transitions. [2022-11-16 12:42:23,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15732 states and 29470 transitions. [2022-11-16 12:42:23,945 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15732 to 7982. [2022-11-16 12:42:23,979 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7982 states, 7982 states have (on average 1.8767226259082936) internal successors, (14980), 7981 states have internal predecessors, (14980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:24,003 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7982 states to 7982 states and 14980 transitions. [2022-11-16 12:42:24,003 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2022-11-16 12:42:24,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-11-16 12:42:24,005 INFO L428 stractBuchiCegarLoop]: Abstraction has 7982 states and 14980 transitions. [2022-11-16 12:42:24,006 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-16 12:42:24,006 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7982 states and 14980 transitions. [2022-11-16 12:42:24,042 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4063 [2022-11-16 12:42:24,042 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:24,042 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:24,046 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:24,046 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:24,047 INFO L748 eck$LassoCheckResult]: Stem: 51052#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 51053#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 51410#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 51411#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 51874#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 51029#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 50540#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 50541#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 52380#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 50491#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 51667#L3009 assume 0 == initPersonOnFloor_~floor#1; 51668#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 50536#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 51902#L2801 assume !(0 == callOnFloor_~floorID#1); 52249#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 50994#L2813-2 assume { :end_inline_callOnFloor } true; 51185#L3153 assume { :end_inline_initPersonOnFloor } true; 50297#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 50298#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 52459#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 52464#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 52463#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 51257#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 50501#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 50503#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 52462#L2073 assume !(0 != timeShift_~tmp___9~2#1); 50789#L2164 assume !(1 == ~doorState~0); 50790#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 50100#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 50101#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 57908#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 57906#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 57907#L1892 assume !(1 == ~currentHeading~0); 57948#L1902 assume !(0 == ~currentFloorID~0); 50282#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 50283#L1908-1 assume { :end_inline_continueInDirection } true; 51624#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 51239#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 51240#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 51564#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 52167#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 51736#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 50271#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 51666#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 51002#L890-2 [2022-11-16 12:42:24,048 INFO L750 eck$LassoCheckResult]: Loop: 51002#L890-2 assume !false; 51441#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 51442#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 52269#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 52516#L898 assume 1 != cleanup_~tmp___0~1#1; 52515#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 52514#L2738-21 assume !(0 == isFloorCalling_~floorID#1); 52500#L2742-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 52487#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 52476#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 52471#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 52470#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 52469#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 52468#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 52467#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 52466#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 52465#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 51755#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 51663#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 51665#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 52461#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 51112#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 51113#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 51907#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 51908#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 57987#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 57986#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 52373#L1892-3 assume !(1 == ~currentHeading~0); 52374#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 50932#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 51255#L1908-7 assume { :end_inline_continueInDirection } true; 50712#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 52379#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 50620#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 50621#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 52183#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 52235#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 50610#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 50951#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 51002#L890-2 [2022-11-16 12:42:24,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:24,049 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 1 times [2022-11-16 12:42:24,050 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:24,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [292609281] [2022-11-16 12:42:24,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:24,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:24,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:24,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:24,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:24,177 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [292609281] [2022-11-16 12:42:24,178 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [292609281] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:24,179 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:24,183 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:24,183 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2088992148] [2022-11-16 12:42:24,183 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:24,185 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:24,185 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:24,186 INFO L85 PathProgramCache]: Analyzing trace with hash 490707539, now seen corresponding path program 1 times [2022-11-16 12:42:24,186 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:24,189 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [35572835] [2022-11-16 12:42:24,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:24,192 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:24,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:24,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:24,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:24,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [35572835] [2022-11-16 12:42:24,229 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [35572835] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:24,229 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:24,229 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:24,230 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865250319] [2022-11-16 12:42:24,230 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:24,230 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:24,230 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:24,231 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:42:24,231 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:42:24,232 INFO L87 Difference]: Start difference. First operand 7982 states and 14980 transitions. cyclomatic complexity: 6999 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:25,013 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:25,013 INFO L93 Difference]: Finished difference Result 8752 states and 16300 transitions. [2022-11-16 12:42:25,013 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 8752 states and 16300 transitions. [2022-11-16 12:42:25,065 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4424 [2022-11-16 12:42:25,108 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 8752 states to 8752 states and 16300 transitions. [2022-11-16 12:42:25,108 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 8752 [2022-11-16 12:42:25,119 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 8752 [2022-11-16 12:42:25,120 INFO L73 IsDeterministic]: Start isDeterministic. Operand 8752 states and 16300 transitions. [2022-11-16 12:42:25,130 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:25,131 INFO L218 hiAutomatonCegarLoop]: Abstraction has 8752 states and 16300 transitions. [2022-11-16 12:42:25,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 8752 states and 16300 transitions. [2022-11-16 12:42:25,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 8752 to 7828. [2022-11-16 12:42:25,291 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7828 states, 7828 states have (on average 1.8732754215636178) internal successors, (14664), 7827 states have internal predecessors, (14664), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:25,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7828 states to 7828 states and 14664 transitions. [2022-11-16 12:42:25,322 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2022-11-16 12:42:25,323 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:42:25,323 INFO L428 stractBuchiCegarLoop]: Abstraction has 7828 states and 14664 transitions. [2022-11-16 12:42:25,324 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-16 12:42:25,324 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7828 states and 14664 transitions. [2022-11-16 12:42:25,358 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3941 [2022-11-16 12:42:25,358 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:25,358 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:25,362 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:25,362 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:25,364 INFO L748 eck$LassoCheckResult]: Stem: 67793#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 67794#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 68143#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 68144#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 68611#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 67770#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 67271#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 67272#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 69182#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 67222#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 68405#L3009 assume 0 == initPersonOnFloor_~floor#1; 68406#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 67267#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 68641#L2801 assume !(0 == callOnFloor_~floorID#1); 69018#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 67733#L2813-2 assume { :end_inline_callOnFloor } true; 67925#L3153 assume { :end_inline_initPersonOnFloor } true; 67032#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 67033#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 69292#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 69291#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 69289#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 69094#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 67232#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 67234#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 69287#L2073 assume !(0 != timeShift_~tmp___9~2#1); 67531#L2164 assume !(1 == ~doorState~0); 67532#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 66838#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 66839#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 67570#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 68380#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 68381#L1892 assume !(1 == ~currentHeading~0); 74607#L1902 assume !(0 == ~currentFloorID~0); 74605#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 68383#L1908-1 assume { :end_inline_continueInDirection } true; 68357#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 67977#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 67978#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 68298#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 68917#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 68472#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 67002#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 68513#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 69393#L890-2 [2022-11-16 12:42:25,366 INFO L750 eck$LassoCheckResult]: Loop: 69393#L890-2 assume !false; 69391#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 69386#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 69384#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 69282#L898 assume 1 != cleanup_~tmp___0~1#1; 69283#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 69278#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 69279#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 69273#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 69275#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 69301#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 69300#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 69299#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 69297#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 69296#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 69295#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 67296#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 67297#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 68399#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 68401#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 69284#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 69286#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 73314#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 73312#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 73308#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 73304#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 73302#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 73300#L1892-3 assume !(1 == ~currentHeading~0); 73297#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 73292#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 73289#L1908-7 assume { :end_inline_continueInDirection } true; 73288#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 73287#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 73286#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 73285#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 73234#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 69003#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 67345#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 67686#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 69393#L890-2 [2022-11-16 12:42:25,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:25,367 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 2 times [2022-11-16 12:42:25,367 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:25,367 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911118672] [2022-11-16 12:42:25,368 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:25,368 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:25,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:25,448 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:25,448 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:25,448 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911118672] [2022-11-16 12:42:25,449 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911118672] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:25,449 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:25,449 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:25,449 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1804244362] [2022-11-16 12:42:25,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:25,450 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:25,450 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:25,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1458560194, now seen corresponding path program 1 times [2022-11-16 12:42:25,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:25,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901682825] [2022-11-16 12:42:25,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:25,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:25,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:25,506 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:25,506 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:25,506 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901682825] [2022-11-16 12:42:25,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901682825] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:25,507 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:25,507 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:25,507 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1874633524] [2022-11-16 12:42:25,507 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:25,508 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:25,508 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:25,509 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:25,509 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:25,509 INFO L87 Difference]: Start difference. First operand 7828 states and 14664 transitions. cyclomatic complexity: 6837 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:26,130 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:26,130 INFO L93 Difference]: Finished difference Result 30644 states and 57454 transitions. [2022-11-16 12:42:26,130 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30644 states and 57454 transitions. [2022-11-16 12:42:26,261 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20019 [2022-11-16 12:42:26,387 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30644 states to 30644 states and 57454 transitions. [2022-11-16 12:42:26,388 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30644 [2022-11-16 12:42:26,431 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30644 [2022-11-16 12:42:26,431 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30644 states and 57454 transitions. [2022-11-16 12:42:26,468 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:26,468 INFO L218 hiAutomatonCegarLoop]: Abstraction has 30644 states and 57454 transitions. [2022-11-16 12:42:26,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30644 states and 57454 transitions. [2022-11-16 12:42:26,971 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30644 to 14335. [2022-11-16 12:42:26,990 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.872340425531915) internal successors, (26840), 14334 states have internal predecessors, (26840), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:27,029 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26840 transitions. [2022-11-16 12:42:27,029 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2022-11-16 12:42:27,031 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:42:27,032 INFO L428 stractBuchiCegarLoop]: Abstraction has 14335 states and 26840 transitions. [2022-11-16 12:42:27,032 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-16 12:42:27,032 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26840 transitions. [2022-11-16 12:42:27,078 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2022-11-16 12:42:27,078 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:27,079 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:27,083 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:27,083 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:27,083 INFO L748 eck$LassoCheckResult]: Stem: 106288#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 106289#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 106645#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 106646#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 107136#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 106265#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 105767#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 105768#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 107690#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 105718#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 106910#L3009 assume 0 == initPersonOnFloor_~floor#1; 106911#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 105763#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 107164#L2801 assume !(0 == callOnFloor_~floorID#1); 107542#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 106228#L2813-2 assume { :end_inline_callOnFloor } true; 106422#L3153 assume { :end_inline_initPersonOnFloor } true; 105523#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 105524#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 107808#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 107807#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 107804#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 107805#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 107842#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 107841#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 107840#L2073 assume !(0 != timeShift_~tmp___9~2#1); 107839#L2164 assume !(1 == ~doorState~0); 107838#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 107836#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 107834#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 107835#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 108136#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 108137#L1892 assume !(1 == ~currentHeading~0); 108338#L1902 assume !(0 == ~currentFloorID~0); 108339#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 114268#L1908-1 assume { :end_inline_continueInDirection } true; 114266#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 114265#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 114264#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 114263#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 114260#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 114253#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 114244#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 114242#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 114240#L890-2 [2022-11-16 12:42:27,084 INFO L750 eck$LassoCheckResult]: Loop: 114240#L890-2 assume !false; 114238#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 114236#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 114233#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 114229#L898 assume 1 != cleanup_~tmp___0~1#1; 114227#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 108590#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 108558#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 108515#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 108511#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 108510#L2738-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 108497#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 108484#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 108478#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 108477#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 107992#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 107991#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 107941#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 107924#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 107922#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 107918#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 107916#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 107915#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 107913#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 107912#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 107911#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 107909#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 107901#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 107902#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 108203#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 108205#L1892-3 assume !(1 == ~currentHeading~0); 108198#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 106162#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 106794#L1908-7 assume { :end_inline_continueInDirection } true; 105945#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 107689#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 105851#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 105852#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 107469#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 107642#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 116369#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 114243#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 114240#L890-2 [2022-11-16 12:42:27,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:27,085 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 3 times [2022-11-16 12:42:27,085 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:27,085 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [985782379] [2022-11-16 12:42:27,085 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:27,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:27,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:27,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:27,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:27,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [985782379] [2022-11-16 12:42:27,145 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [985782379] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:27,145 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:27,145 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:27,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [151457536] [2022-11-16 12:42:27,150 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:27,150 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:27,151 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:27,151 INFO L85 PathProgramCache]: Analyzing trace with hash 563705072, now seen corresponding path program 1 times [2022-11-16 12:42:27,151 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:27,154 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [565120175] [2022-11-16 12:42:27,154 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:27,154 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:27,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:27,218 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:27,219 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:27,219 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [565120175] [2022-11-16 12:42:27,219 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [565120175] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:27,219 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:27,219 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:27,220 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [905092245] [2022-11-16 12:42:27,220 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:27,221 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:27,221 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:27,222 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:27,222 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:27,222 INFO L87 Difference]: Start difference. First operand 14335 states and 26840 transitions. cyclomatic complexity: 12506 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:28,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:28,171 INFO L93 Difference]: Finished difference Result 15698 states and 29131 transitions. [2022-11-16 12:42:28,171 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15698 states and 29131 transitions. [2022-11-16 12:42:28,253 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8566 [2022-11-16 12:42:28,324 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15698 states to 15698 states and 29131 transitions. [2022-11-16 12:42:28,325 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15698 [2022-11-16 12:42:28,349 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15698 [2022-11-16 12:42:28,350 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15698 states and 29131 transitions. [2022-11-16 12:42:28,367 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:28,368 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15698 states and 29131 transitions. [2022-11-16 12:42:28,508 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15698 states and 29131 transitions. [2022-11-16 12:42:28,659 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15698 to 14335. [2022-11-16 12:42:28,678 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14335 states, 14335 states have (on average 1.862295081967213) internal successors, (26696), 14334 states have internal predecessors, (26696), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:28,709 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14335 states to 14335 states and 26696 transitions. [2022-11-16 12:42:28,709 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2022-11-16 12:42:28,710 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-16 12:42:28,711 INFO L428 stractBuchiCegarLoop]: Abstraction has 14335 states and 26696 transitions. [2022-11-16 12:42:28,711 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-16 12:42:28,712 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14335 states and 26696 transitions. [2022-11-16 12:42:28,766 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7820 [2022-11-16 12:42:28,766 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:28,766 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:28,772 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:28,773 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:28,773 INFO L748 eck$LassoCheckResult]: Stem: 136333#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 136334#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 136687#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 136688#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 137177#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 136312#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 135811#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 135812#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 137753#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 135762#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 136949#L3009 assume 0 == initPersonOnFloor_~floor#1; 136950#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 135807#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 137206#L2801 assume !(0 == callOnFloor_~floorID#1); 137597#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 136270#L2813-2 assume { :end_inline_callOnFloor } true; 136467#L3153 assume { :end_inline_initPersonOnFloor } true; 135572#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 135573#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 137871#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 137870#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 137869#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 136536#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 135772#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 135774#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 137867#L2073 assume !(0 != timeShift_~tmp___9~2#1); 136070#L2164 assume !(1 == ~doorState~0); 136071#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 135381#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 135382#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145940#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 145874#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 145870#L1892 assume !(1 == ~currentHeading~0); 145864#L1902 assume !(0 == ~currentFloorID~0); 145860#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 145836#L1908-1 assume { :end_inline_continueInDirection } true; 145834#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 145833#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 145832#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 145830#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 145831#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 140062#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 140052#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 140051#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 137895#L890-2 [2022-11-16 12:42:28,774 INFO L750 eck$LassoCheckResult]: Loop: 137895#L890-2 assume !false; 137891#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 137885#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 137866#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 137865#L898 assume 1 != cleanup_~tmp___0~1#1; 137864#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 137863#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 137862#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 137860#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 137859#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 137700#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 137701#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 137068#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 137606#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 140087#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 140086#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 140085#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 140083#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 140082#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 140080#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 140078#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 140076#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 140077#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 137893#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 137894#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 145811#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 145809#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145798#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 145789#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 145778#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 145776#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 145771#L1892-3 assume !(1 == ~currentHeading~0); 145729#L1902-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 145724#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145718#L1908-7 assume { :end_inline_continueInDirection } true; 145714#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 145713#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 145712#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 145710#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 145711#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 140073#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 140053#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 140050#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 137895#L890-2 [2022-11-16 12:42:28,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:28,775 INFO L85 PathProgramCache]: Analyzing trace with hash -809336551, now seen corresponding path program 4 times [2022-11-16 12:42:28,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:28,775 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1473785298] [2022-11-16 12:42:28,775 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:28,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:28,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:28,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:28,849 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:28,849 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1473785298] [2022-11-16 12:42:28,849 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1473785298] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:28,849 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:28,850 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:28,850 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1502790536] [2022-11-16 12:42:28,850 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:28,850 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:28,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:28,851 INFO L85 PathProgramCache]: Analyzing trace with hash -1440860298, now seen corresponding path program 1 times [2022-11-16 12:42:28,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:28,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [722452984] [2022-11-16 12:42:28,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:28,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:28,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:28,999 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:28,999 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:28,999 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [722452984] [2022-11-16 12:42:28,999 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [722452984] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:29,000 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:29,000 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:29,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [610593470] [2022-11-16 12:42:29,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:29,000 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:29,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:29,001 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:29,001 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:29,001 INFO L87 Difference]: Start difference. First operand 14335 states and 26696 transitions. cyclomatic complexity: 12362 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:29,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:29,285 INFO L93 Difference]: Finished difference Result 21615 states and 40061 transitions. [2022-11-16 12:42:29,285 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21615 states and 40061 transitions. [2022-11-16 12:42:29,358 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14824 [2022-11-16 12:42:29,564 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21615 states to 21615 states and 40061 transitions. [2022-11-16 12:42:29,564 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21615 [2022-11-16 12:42:29,576 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21615 [2022-11-16 12:42:29,585 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21615 states and 40061 transitions. [2022-11-16 12:42:29,614 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:29,614 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21615 states and 40061 transitions. [2022-11-16 12:42:29,628 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21615 states and 40061 transitions. [2022-11-16 12:42:29,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21615 to 14353. [2022-11-16 12:42:29,816 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14353 states, 14353 states have (on average 1.8612136835504773) internal successors, (26714), 14352 states have internal predecessors, (26714), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:29,848 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14353 states to 14353 states and 26714 transitions. [2022-11-16 12:42:29,848 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2022-11-16 12:42:29,849 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:42:29,851 INFO L428 stractBuchiCegarLoop]: Abstraction has 14353 states and 26714 transitions. [2022-11-16 12:42:29,851 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-16 12:42:29,851 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14353 states and 26714 transitions. [2022-11-16 12:42:29,897 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7832 [2022-11-16 12:42:29,898 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:29,898 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:29,902 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:29,902 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:29,902 INFO L748 eck$LassoCheckResult]: Stem: 172297#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 172298#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 172651#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 172652#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 173151#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 172276#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 171776#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 171777#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 173745#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 171727#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 172922#L3009 assume 0 == initPersonOnFloor_~floor#1; 172923#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 171772#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 173180#L2801 assume !(0 == callOnFloor_~floorID#1); 173576#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 172237#L2813-2 assume { :end_inline_callOnFloor } true; 172427#L3153 assume { :end_inline_initPersonOnFloor } true; 171535#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 171536#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 173871#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 173869#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 173866#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 173867#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 173982#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 173981#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 173979#L2073 assume !(0 != timeShift_~tmp___9~2#1); 173978#L2164 assume !(1 == ~doorState~0); 173977#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173975#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 173976#L1685 assume !(0 == ~currentFloorID~0); 174430#L1691 assume !(~currentFloorID~0 > 0); 172881#L1706 assume ~currentFloorID~0 > 0; 172139#L1708 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 172141#L1709 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 173201#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 185384#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 185382#L1892 assume !(1 == ~currentHeading~0); 185381#L1902 assume !(0 == ~currentFloorID~0); 171517#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 171518#L1908-1 assume { :end_inline_continueInDirection } true; 185375#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 185374#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 185373#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 185370#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 185369#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 172999#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 171507#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 185355#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 173093#L890-2 [2022-11-16 12:42:29,903 INFO L750 eck$LassoCheckResult]: Loop: 173093#L890-2 assume !false; 172684#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 172685#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 173563#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 173564#L898 assume 1 != cleanup_~tmp___0~1#1; 182145#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 182143#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 182141#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 177107#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 174135#L1424 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 174124#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 174122#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 174120#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 174117#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 174115#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 174113#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 174111#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 174105#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 174100#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 174097#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 174095#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 174092#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 174090#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 174088#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 174083#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 174084#L1685-2 assume !(0 == ~currentFloorID~0); 173073#L1691-2 assume !(~currentFloorID~0 > 0); 172333#L1706-2 assume ~currentFloorID~0 > 0; 173448#L1708-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 173476#L1709-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 182137#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 182138#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 173738#L1892-3 assume !(1 == ~currentHeading~0); 173739#L1902-9 assume !(0 == ~currentFloorID~0); 172493#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 172494#L1908-7 assume { :end_inline_continueInDirection } true; 185480#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 185479#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 185477#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 185475#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 185474#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 185471#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 185464#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 185354#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 173093#L890-2 [2022-11-16 12:42:29,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:29,904 INFO L85 PathProgramCache]: Analyzing trace with hash -392297214, now seen corresponding path program 1 times [2022-11-16 12:42:29,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:29,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [531746257] [2022-11-16 12:42:29,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:29,906 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:29,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:29,995 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:29,995 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:29,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [531746257] [2022-11-16 12:42:29,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [531746257] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:29,996 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:29,996 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:29,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1785638350] [2022-11-16 12:42:29,998 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:29,999 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:29,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:29,999 INFO L85 PathProgramCache]: Analyzing trace with hash 367395542, now seen corresponding path program 1 times [2022-11-16 12:42:29,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:30,000 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [972063825] [2022-11-16 12:42:30,000 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:30,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:30,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:30,178 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:30,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:30,179 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [972063825] [2022-11-16 12:42:30,181 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [972063825] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:30,181 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:30,182 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:30,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1151158030] [2022-11-16 12:42:30,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:30,182 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:30,183 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:30,183 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:30,184 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:30,184 INFO L87 Difference]: Start difference. First operand 14353 states and 26714 transitions. cyclomatic complexity: 12362 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:31,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:31,693 INFO L93 Difference]: Finished difference Result 19425 states and 36084 transitions. [2022-11-16 12:42:31,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19425 states and 36084 transitions. [2022-11-16 12:42:31,838 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15011 [2022-11-16 12:42:31,891 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19425 states to 19425 states and 36084 transitions. [2022-11-16 12:42:31,892 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19425 [2022-11-16 12:42:31,908 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19425 [2022-11-16 12:42:31,908 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19425 states and 36084 transitions. [2022-11-16 12:42:31,927 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:31,927 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19425 states and 36084 transitions. [2022-11-16 12:42:31,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19425 states and 36084 transitions. [2022-11-16 12:42:32,061 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19425 to 10851. [2022-11-16 12:42:32,074 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10851 states, 10851 states have (on average 1.8503363745276933) internal successors, (20078), 10850 states have internal predecessors, (20078), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:32,096 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10851 states to 10851 states and 20078 transitions. [2022-11-16 12:42:32,097 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2022-11-16 12:42:32,097 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:42:32,100 INFO L428 stractBuchiCegarLoop]: Abstraction has 10851 states and 20078 transitions. [2022-11-16 12:42:32,101 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-16 12:42:32,101 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10851 states and 20078 transitions. [2022-11-16 12:42:32,135 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7876 [2022-11-16 12:42:32,135 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:32,135 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:32,142 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:32,143 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:32,143 INFO L748 eck$LassoCheckResult]: Stem: 206006#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 206007#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 206329#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 206330#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 206766#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 205988#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 205537#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 205538#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 207239#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 205493#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 206566#L3009 assume 0 == initPersonOnFloor_~floor#1; 206567#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 205533#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 206791#L2801 assume !(0 == callOnFloor_~floorID#1); 207114#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 205955#L2813-2 assume { :end_inline_callOnFloor } true; 207306#L3153 assume { :end_inline_initPersonOnFloor } true; 207305#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 207304#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 207303#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 207302#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 207218#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 207174#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 205503#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 205505#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 207301#L2073 assume !(0 != timeShift_~tmp___9~2#1); 205777#L2164 assume !(1 == ~doorState~0); 205778#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 205139#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 205140#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 205809#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 206544#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 206473#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 206474#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 205998#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 205999#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 205221#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 205111#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 205112#L1892-2 assume !(1 == ~currentHeading~0); 206364#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 206365#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 206715#L1908-5 assume { :end_inline_continueInDirection } true; 206524#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 211729#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 211728#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 211727#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 211724#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 211717#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 211708#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 207402#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 207401#L890-2 [2022-11-16 12:42:32,144 INFO L750 eck$LassoCheckResult]: Loop: 207401#L890-2 assume !false; 207400#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 207399#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 207398#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 207397#L898 assume 1 != cleanup_~tmp___0~1#1; 207396#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 207394#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 207395#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 207390#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 207391#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 207385#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 207386#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 207358#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 207359#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 211678#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 211677#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 211675#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 211674#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 207337#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 207336#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 207335#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 207334#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 207332#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 207331#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 207329#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 206066#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 206067#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 206797#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 206239#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 206240#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 215208#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 214692#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 215200#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 215194#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 214975#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 214700#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 214695#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 207056#L1892-5 assume !(1 == ~currentHeading~0); 207057#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 205224#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 211769#L1908-11 assume { :end_inline_continueInDirection } true; 211765#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 211764#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 211757#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 211755#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 211756#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 211739#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 211730#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 207403#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 207401#L890-2 [2022-11-16 12:42:32,145 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:32,145 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 1 times [2022-11-16 12:42:32,146 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:32,146 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77556921] [2022-11-16 12:42:32,146 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:32,146 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:32,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:32,210 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:32,210 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:32,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77556921] [2022-11-16 12:42:32,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77556921] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:32,211 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:32,211 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:32,211 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1433517431] [2022-11-16 12:42:32,211 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:32,212 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:32,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:32,212 INFO L85 PathProgramCache]: Analyzing trace with hash 279913123, now seen corresponding path program 1 times [2022-11-16 12:42:32,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:32,213 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [551677655] [2022-11-16 12:42:32,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:32,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:32,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:32,280 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:32,280 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:32,280 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [551677655] [2022-11-16 12:42:32,280 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [551677655] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:32,281 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:32,281 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:32,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1695266162] [2022-11-16 12:42:32,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:32,282 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:32,283 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:32,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:32,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:32,284 INFO L87 Difference]: Start difference. First operand 10851 states and 20078 transitions. cyclomatic complexity: 9228 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:32,575 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:32,575 INFO L93 Difference]: Finished difference Result 32283 states and 59689 transitions. [2022-11-16 12:42:32,575 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 32283 states and 59689 transitions. [2022-11-16 12:42:32,698 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 29139 [2022-11-16 12:42:32,810 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 32283 states to 32283 states and 59689 transitions. [2022-11-16 12:42:32,811 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 32283 [2022-11-16 12:42:32,841 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 32283 [2022-11-16 12:42:32,841 INFO L73 IsDeterministic]: Start isDeterministic. Operand 32283 states and 59689 transitions. [2022-11-16 12:42:32,865 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:32,865 INFO L218 hiAutomatonCegarLoop]: Abstraction has 32283 states and 59689 transitions. [2022-11-16 12:42:33,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 32283 states and 59689 transitions. [2022-11-16 12:42:33,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 32283 to 10863. [2022-11-16 12:42:33,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10863 states, 10863 states have (on average 1.849397035809629) internal successors, (20090), 10862 states have internal predecessors, (20090), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:33,261 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10863 states to 10863 states and 20090 transitions. [2022-11-16 12:42:33,261 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2022-11-16 12:42:33,262 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:42:33,263 INFO L428 stractBuchiCegarLoop]: Abstraction has 10863 states and 20090 transitions. [2022-11-16 12:42:33,263 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-16 12:42:33,263 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10863 states and 20090 transitions. [2022-11-16 12:42:33,295 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7886 [2022-11-16 12:42:33,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:33,296 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:33,297 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:33,297 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:33,298 INFO L748 eck$LassoCheckResult]: Stem: 249160#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 249161#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 249493#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 249494#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 249959#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 249141#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 248686#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 248687#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 250475#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 248642#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 249739#L3009 assume 0 == initPersonOnFloor_~floor#1; 249740#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 248682#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 249986#L2801 assume !(0 == callOnFloor_~floorID#1); 250343#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 249111#L2813-2 assume { :end_inline_callOnFloor } true; 250575#L3153 assume { :end_inline_initPersonOnFloor } true; 250574#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 250573#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 250572#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 250571#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 250454#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 250404#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 248652#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 248654#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 250569#L2073 assume !(0 != timeShift_~tmp___9~2#1); 248924#L2164 assume !(1 == ~doorState~0); 248925#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 248284#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 248285#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 248961#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 249717#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 249644#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 249646#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250570#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 249511#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 248365#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 248256#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 248257#L1892-2 assume !(1 == ~currentHeading~0); 249529#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 249530#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 249902#L1908-5 assume { :end_inline_continueInDirection } true; 249697#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 253523#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 253522#L254 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 253521#L255 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 253520#L1321 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 253517#L259 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 253497#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 253494#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 253493#L890-2 [2022-11-16 12:42:33,298 INFO L750 eck$LassoCheckResult]: Loop: 253493#L890-2 assume !false; 253490#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 253489#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 253488#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 253487#L898 assume 1 != cleanup_~tmp___0~1#1; 253486#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253485#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 253484#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 253482#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 253392#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 253393#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 253456#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 250713#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 250714#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 253347#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 250690#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 250687#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 250688#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 250669#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 250668#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 250667#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 250666#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 250664#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 250663#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 250661#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 250660#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 250655#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250630#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 250617#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 250603#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 250583#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 250581#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 250580#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 250578#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 250567#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 249826#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 253551#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 253548#L1892-5 assume !(1 == ~currentHeading~0); 253545#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 253544#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 253543#L1908-11 assume { :end_inline_continueInDirection } true; 253538#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 253535#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 253534#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 253532#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 253530#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 253506#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 253496#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 253495#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 253493#L890-2 [2022-11-16 12:42:33,299 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:33,299 INFO L85 PathProgramCache]: Analyzing trace with hash 1761456702, now seen corresponding path program 2 times [2022-11-16 12:42:33,299 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:33,299 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [776484439] [2022-11-16 12:42:33,299 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:33,300 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:33,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:33,359 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:33,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:33,359 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [776484439] [2022-11-16 12:42:33,360 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [776484439] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:33,360 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:33,360 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:33,360 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [353560570] [2022-11-16 12:42:33,360 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:33,361 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:33,362 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:33,362 INFO L85 PathProgramCache]: Analyzing trace with hash -1714231583, now seen corresponding path program 1 times [2022-11-16 12:42:33,363 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:33,363 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040950753] [2022-11-16 12:42:33,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:33,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:33,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:33,665 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:33,666 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:33,666 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040950753] [2022-11-16 12:42:33,666 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040950753] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:33,666 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:33,666 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:33,667 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1803488222] [2022-11-16 12:42:33,667 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:33,667 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:33,667 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:33,668 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:42:33,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:42:33,669 INFO L87 Difference]: Start difference. First operand 10863 states and 20090 transitions. cyclomatic complexity: 9228 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:35,644 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:35,645 INFO L93 Difference]: Finished difference Result 26128 states and 48110 transitions. [2022-11-16 12:42:35,645 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26128 states and 48110 transitions. [2022-11-16 12:42:35,825 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23130 [2022-11-16 12:42:35,881 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26128 states to 26128 states and 48110 transitions. [2022-11-16 12:42:35,881 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26128 [2022-11-16 12:42:35,901 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26128 [2022-11-16 12:42:35,901 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26128 states and 48110 transitions. [2022-11-16 12:42:35,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:35,921 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26128 states and 48110 transitions. [2022-11-16 12:42:35,941 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26128 states and 48110 transitions. [2022-11-16 12:42:36,111 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26128 to 14142. [2022-11-16 12:42:36,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14142 states, 14142 states have (on average 1.8539810493565267) internal successors, (26219), 14141 states have internal predecessors, (26219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:36,157 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14142 states to 14142 states and 26219 transitions. [2022-11-16 12:42:36,157 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14142 states and 26219 transitions. [2022-11-16 12:42:36,158 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-11-16 12:42:36,158 INFO L428 stractBuchiCegarLoop]: Abstraction has 14142 states and 26219 transitions. [2022-11-16 12:42:36,158 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-16 12:42:36,159 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14142 states and 26219 transitions. [2022-11-16 12:42:36,205 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:36,205 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:36,205 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:36,210 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:36,210 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:36,210 INFO L748 eck$LassoCheckResult]: Stem: 286192#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 286193#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 286524#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 286525#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 286981#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 286175#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 285716#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 285717#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 287487#L104 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 285672#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 286766#L3009 assume 0 == initPersonOnFloor_~floor#1; 286767#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 285712#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 287007#L2801 assume !(0 == callOnFloor_~floorID#1); 287364#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 286143#L2813-2 assume { :end_inline_callOnFloor } true; 286321#L3153 assume { :end_inline_initPersonOnFloor } true; 285498#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 285499#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 286396#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 287585#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 287465#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 287424#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 285682#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 285684#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 287584#L2073 assume !(0 != timeShift_~tmp___9~2#1); 285957#L2164 assume !(1 == ~doorState~0); 285958#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 285311#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 285312#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 285990#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 286747#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 286676#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 286678#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 287580#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 286544#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 285396#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 285282#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 285283#L1892-2 assume !(1 == ~currentHeading~0); 286561#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 286562#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 286924#L1908-5 assume { :end_inline_continueInDirection } true; 286726#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 286371#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 286372#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 286675#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 287645#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 287634#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 287635#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 292915#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 292914#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 292896#L890-2 [2022-11-16 12:42:36,211 INFO L750 eck$LassoCheckResult]: Loop: 292896#L890-2 assume !false; 292891#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 292879#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 292877#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 292875#L898 assume 1 != cleanup_~tmp___0~1#1; 292873#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 292857#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 292854#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 292813#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 292794#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 292792#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 292790#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 292788#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 292783#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 292778#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 292774#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 292775#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 291572#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 291570#L2075-2 assume !(0 != ~persons_0~0); 291559#L2075-3 assume !(0 != ~persons_1~0); 291541#L2089-1 assume !(0 != ~persons_2~0); 291534#L2103-1 assume !(0 != ~persons_3~0); 291528#L2117-1 assume !(0 != ~persons_4~0); 291523#L2131-1 assume !(0 != ~persons_5~0); 291519#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 291518#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 291457#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 291447#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 291443#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 291444#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 292124#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 292101#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 291616#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 291614#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 291615#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 291767#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 291746#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 291731#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 291729#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 291730#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 292047#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 290678#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 290655#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 290653#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 290651#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 290649#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 290633#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 290611#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 290609#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 290610#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 289990#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 289687#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 289661#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 289572#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 289558#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 289541#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 289531#L2785-41 assume { :end_inline_resetCallOnFloor } true; 289529#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 289524#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 289516#L1295-5 assume { :end_inline_resetFloorButton } true; 289513#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 289512#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 289510#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 289511#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 292925#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 292930#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 292928#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 292923#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 292913#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 292896#L890-2 [2022-11-16 12:42:36,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:36,212 INFO L85 PathProgramCache]: Analyzing trace with hash 589502422, now seen corresponding path program 1 times [2022-11-16 12:42:36,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:36,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1708105040] [2022-11-16 12:42:36,213 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:36,213 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:36,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:36,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:36,274 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:36,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1708105040] [2022-11-16 12:42:36,275 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1708105040] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:36,275 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:36,275 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:36,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1670564479] [2022-11-16 12:42:36,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:36,275 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:36,276 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:36,276 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 1 times [2022-11-16 12:42:36,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:36,276 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [4133626] [2022-11-16 12:42:36,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:36,277 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:36,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:36,373 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:36,374 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:36,374 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [4133626] [2022-11-16 12:42:36,374 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [4133626] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:36,374 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:36,374 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:36,374 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288861107] [2022-11-16 12:42:36,375 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:36,375 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:36,375 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:36,376 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:42:36,376 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:42:36,376 INFO L87 Difference]: Start difference. First operand 14142 states and 26219 transitions. cyclomatic complexity: 12078 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:36,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:36,520 INFO L93 Difference]: Finished difference Result 14142 states and 26213 transitions. [2022-11-16 12:42:36,521 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14142 states and 26213 transitions. [2022-11-16 12:42:36,585 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:36,633 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14142 states to 14142 states and 26213 transitions. [2022-11-16 12:42:36,633 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14142 [2022-11-16 12:42:36,645 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14142 [2022-11-16 12:42:36,645 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14142 states and 26213 transitions. [2022-11-16 12:42:36,656 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:36,657 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14142 states and 26213 transitions. [2022-11-16 12:42:36,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14142 states and 26213 transitions. [2022-11-16 12:42:36,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14142 to 14142. [2022-11-16 12:42:36,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14142 states, 14142 states have (on average 1.8535567812190639) internal successors, (26213), 14141 states have internal predecessors, (26213), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:36,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14142 states to 14142 states and 26213 transitions. [2022-11-16 12:42:36,846 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14142 states and 26213 transitions. [2022-11-16 12:42:36,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:42:36,847 INFO L428 stractBuchiCegarLoop]: Abstraction has 14142 states and 26213 transitions. [2022-11-16 12:42:36,847 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-16 12:42:36,847 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14142 states and 26213 transitions. [2022-11-16 12:42:36,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:36,897 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:36,897 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:36,902 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:36,902 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:36,902 INFO L748 eck$LassoCheckResult]: Stem: 314466#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 314467#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 314796#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 314797#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 315237#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 314447#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 314003#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 314004#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 315714#L104 assume !(0 == getOrigin_~person#1); 315192#L108 assume !(1 == getOrigin_~person#1); 313959#L112 assume !(2 == getOrigin_~person#1); 313960#L116 assume !(3 == getOrigin_~person#1); 315335#L120 assume !(4 == getOrigin_~person#1); 315117#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 315118#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 315034#L3009 assume 0 == initPersonOnFloor_~floor#1; 315035#L3010 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 313999#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 315261#L2801 assume !(0 == callOnFloor_~floorID#1); 315596#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 314416#L2813-2 assume { :end_inline_callOnFloor } true; 314594#L3153 assume { :end_inline_initPersonOnFloor } true; 313787#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 313788#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 315787#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 315786#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 315692#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 315653#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 313969#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 313971#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 315785#L2073 assume !(0 != timeShift_~tmp___9~2#1); 314237#L2164 assume !(1 == ~doorState~0); 314238#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 313605#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 313606#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 314271#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 315012#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 314940#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 314942#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 315780#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 314812#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 313687#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 313577#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 313578#L1892-2 assume !(1 == ~currentHeading~0); 314830#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 314831#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 315187#L1908-5 assume { :end_inline_continueInDirection } true; 314991#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 317791#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 317790#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 317789#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 317787#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 317783#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 317774#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 317773#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 317772#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 317770#L890-2 [2022-11-16 12:42:36,903 INFO L750 eck$LassoCheckResult]: Loop: 317770#L890-2 assume !false; 317769#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 317768#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 317767#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 317766#L898 assume 1 != cleanup_~tmp___0~1#1; 317765#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 317764#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 317763#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 315792#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 315793#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 321086#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 321085#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 321084#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 321083#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 321079#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 321078#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 321071#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 321854#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 321066#L2075-2 assume !(0 != ~persons_0~0); 321842#L2075-3 assume !(0 != ~persons_1~0); 321824#L2089-1 assume !(0 != ~persons_2~0); 321817#L2103-1 assume !(0 != ~persons_3~0); 321811#L2117-1 assume !(0 != ~persons_4~0); 321806#L2131-1 assume !(0 != ~persons_5~0); 321802#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 321801#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 321693#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 321678#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 321676#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 321674#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 321673#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 321607#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 321595#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 321592#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 321589#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 321587#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 321559#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 321544#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 321542#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 321543#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 322504#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 322450#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 322432#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 322430#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 322431#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 322663#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 322649#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 322621#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 322619#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 322617#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 322616#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 322606#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 322580#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 321150#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 321148#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 321145#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 321146#L2785-41 assume { :end_inline_resetCallOnFloor } true; 323620#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 323619#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 314828#L1295-5 assume { :end_inline_resetFloorButton } true; 323598#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 323596#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 323595#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 323593#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 317794#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 317799#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 317797#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 317792#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 317771#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 317770#L890-2 [2022-11-16 12:42:36,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:36,904 INFO L85 PathProgramCache]: Analyzing trace with hash 1218701733, now seen corresponding path program 1 times [2022-11-16 12:42:36,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:36,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [919575465] [2022-11-16 12:42:36,905 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:36,905 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:36,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:37,026 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:37,027 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:37,027 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [919575465] [2022-11-16 12:42:37,027 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [919575465] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:37,027 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:37,027 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-16 12:42:37,028 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [761649210] [2022-11-16 12:42:37,028 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:37,028 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:37,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:37,029 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 2 times [2022-11-16 12:42:37,029 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:37,029 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [836942646] [2022-11-16 12:42:37,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:37,030 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:37,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:37,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:37,227 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:37,227 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [836942646] [2022-11-16 12:42:37,228 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [836942646] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:37,228 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:37,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:37,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216432236] [2022-11-16 12:42:37,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:37,228 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:37,228 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:37,229 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:42:37,229 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:42:37,229 INFO L87 Difference]: Start difference. First operand 14142 states and 26213 transitions. cyclomatic complexity: 12072 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:37,385 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:37,385 INFO L93 Difference]: Finished difference Result 14136 states and 26200 transitions. [2022-11-16 12:42:37,385 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14136 states and 26200 transitions. [2022-11-16 12:42:37,443 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:37,478 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14136 states to 14136 states and 26200 transitions. [2022-11-16 12:42:37,478 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14136 [2022-11-16 12:42:37,489 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14136 [2022-11-16 12:42:37,490 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14136 states and 26200 transitions. [2022-11-16 12:42:37,501 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:37,502 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26200 transitions. [2022-11-16 12:42:37,511 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14136 states and 26200 transitions. [2022-11-16 12:42:37,657 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14136 to 14136. [2022-11-16 12:42:37,672 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14136 states, 14136 states have (on average 1.8534238822863611) internal successors, (26200), 14135 states have internal predecessors, (26200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:37,705 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14136 states to 14136 states and 26200 transitions. [2022-11-16 12:42:37,706 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26200 transitions. [2022-11-16 12:42:37,706 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-16 12:42:37,712 INFO L428 stractBuchiCegarLoop]: Abstraction has 14136 states and 26200 transitions. [2022-11-16 12:42:37,712 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-16 12:42:37,712 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14136 states and 26200 transitions. [2022-11-16 12:42:37,747 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:37,747 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:37,747 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:37,751 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:37,751 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:37,751 INFO L748 eck$LassoCheckResult]: Stem: 342765#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 342766#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 343093#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 343094#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 343534#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 342746#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 342302#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 342303#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 344004#L104 assume !(0 == getOrigin_~person#1); 343486#L108 assume !(1 == getOrigin_~person#1); 342258#L112 assume !(2 == getOrigin_~person#1); 342259#L116 assume !(3 == getOrigin_~person#1); 343635#L120 assume !(4 == getOrigin_~person#1); 343409#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 343410#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 343332#L3009 assume !(0 == initPersonOnFloor_~floor#1); 343119#L3036 assume 1 == initPersonOnFloor_~floor#1; 343120#L3037 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 342298#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 343559#L2801 assume !(0 == callOnFloor_~floorID#1); 343890#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 342715#L2813-2 assume { :end_inline_callOnFloor } true; 342892#L3153 assume { :end_inline_initPersonOnFloor } true; 344082#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 344081#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 344080#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 344079#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 343984#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 343946#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 342268#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 342270#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 344077#L2073 assume !(0 != timeShift_~tmp___9~2#1); 342535#L2164 assume !(1 == ~doorState~0); 342536#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 341904#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 341905#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 342571#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 343311#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 343244#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 343246#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 344071#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 343113#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 341986#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 341876#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 341877#L1892-2 assume !(1 == ~currentHeading~0); 343131#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 343132#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 343481#L1908-5 assume { :end_inline_continueInDirection } true; 343291#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 354989#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 343242#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 343243#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 355003#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 355004#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 354990#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 349212#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 345808#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 344132#L890-2 [2022-11-16 12:42:37,752 INFO L750 eck$LassoCheckResult]: Loop: 344132#L890-2 assume !false; 344133#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 352556#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 352554#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 352552#L898 assume 1 != cleanup_~tmp___0~1#1; 352550#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 352548#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 352546#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 352543#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 352542#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 352541#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 352540#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 352539#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 352538#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 352534#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 352533#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 352526#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 352518#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 352494#L2075-2 assume !(0 != ~persons_0~0); 352481#L2075-3 assume !(0 != ~persons_1~0); 352474#L2089-1 assume !(0 != ~persons_2~0); 352461#L2103-1 assume !(0 != ~persons_3~0); 352437#L2117-1 assume !(0 != ~persons_4~0); 352395#L2131-1 assume !(0 != ~persons_5~0); 352390#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352367#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 352285#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352275#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 352267#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 352262#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352260#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 352227#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352215#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 352207#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 352205#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352202#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 352183#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352163#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 352160#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 352153#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352147#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 352078#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352055#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 352053#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 352051#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352050#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 352036#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352014#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 352012#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 352013#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 352693#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 352665#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 352632#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 352627#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 352622#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 352609#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 343374#L2785-41 assume { :end_inline_resetCallOnFloor } true; 350176#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 349779#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 349267#L1295-5 assume { :end_inline_resetFloorButton } true; 349263#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 349260#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 349258#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 349259#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 349223#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 349228#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 349226#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 349214#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 345809#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 344132#L890-2 [2022-11-16 12:42:37,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:37,752 INFO L85 PathProgramCache]: Analyzing trace with hash 1156961634, now seen corresponding path program 1 times [2022-11-16 12:42:37,752 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:37,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [13507428] [2022-11-16 12:42:37,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:37,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:37,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:37,836 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:37,836 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:37,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [13507428] [2022-11-16 12:42:37,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [13507428] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:37,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:37,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:37,837 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510720595] [2022-11-16 12:42:37,837 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:37,838 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:37,839 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:37,839 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 3 times [2022-11-16 12:42:37,839 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:37,839 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1861453289] [2022-11-16 12:42:37,840 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:37,840 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:37,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:38,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:38,036 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:38,036 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1861453289] [2022-11-16 12:42:38,036 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1861453289] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:38,036 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:38,036 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:38,037 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2025448126] [2022-11-16 12:42:38,037 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:38,038 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:38,038 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:38,038 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:38,038 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:38,039 INFO L87 Difference]: Start difference. First operand 14136 states and 26200 transitions. cyclomatic complexity: 12065 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:38,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:38,222 INFO L93 Difference]: Finished difference Result 14136 states and 26196 transitions. [2022-11-16 12:42:38,223 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14136 states and 26196 transitions. [2022-11-16 12:42:38,312 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:38,374 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14136 states to 14136 states and 26196 transitions. [2022-11-16 12:42:38,374 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14136 [2022-11-16 12:42:38,389 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14136 [2022-11-16 12:42:38,389 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14136 states and 26196 transitions. [2022-11-16 12:42:38,403 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:38,404 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26196 transitions. [2022-11-16 12:42:38,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14136 states and 26196 transitions. [2022-11-16 12:42:38,618 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14136 to 14136. [2022-11-16 12:42:38,633 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14136 states, 14136 states have (on average 1.8531409168081494) internal successors, (26196), 14135 states have internal predecessors, (26196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:38,674 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14136 states to 14136 states and 26196 transitions. [2022-11-16 12:42:38,674 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26196 transitions. [2022-11-16 12:42:38,675 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:38,676 INFO L428 stractBuchiCegarLoop]: Abstraction has 14136 states and 26196 transitions. [2022-11-16 12:42:38,676 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-11-16 12:42:38,676 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14136 states and 26196 transitions. [2022-11-16 12:42:38,733 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:38,733 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:38,733 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:38,742 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:38,743 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:38,743 INFO L748 eck$LassoCheckResult]: Stem: 371064#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 371065#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 371398#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 371399#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 371853#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 371047#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 370591#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 370592#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 372375#L104 assume !(0 == getOrigin_~person#1); 371807#L108 assume !(1 == getOrigin_~person#1); 370547#L112 assume !(2 == getOrigin_~person#1); 370548#L116 assume !(3 == getOrigin_~person#1); 371961#L120 assume !(4 == getOrigin_~person#1); 371721#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 371722#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 371642#L3009 assume !(0 == initPersonOnFloor_~floor#1); 371422#L3036 assume 1 == initPersonOnFloor_~floor#1; 371423#L3037 assume !(0 == initPersonOnFloor_~person#1); 372078#L3040 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 370587#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 371879#L2801 assume !(0 == callOnFloor_~floorID#1); 372242#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 371014#L2813-2 assume { :end_inline_callOnFloor } true; 372459#L3153 assume { :end_inline_initPersonOnFloor } true; 372458#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 372457#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 372456#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 372455#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 372352#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 372307#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 370557#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 370559#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 372454#L2073 assume !(0 != timeShift_~tmp___9~2#1); 370828#L2164 assume !(1 == ~doorState~0); 370829#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 370190#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 370191#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 370864#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 371621#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 371551#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 371553#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 372448#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 371417#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 370274#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 370162#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 370163#L1892-2 assume !(1 == ~currentHeading~0); 371435#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 371436#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 371800#L1908-5 assume { :end_inline_continueInDirection } true; 371601#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 371244#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 371245#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 371550#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 372623#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 372619#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 372610#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 372609#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 372607#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 372606#L890-2 [2022-11-16 12:42:38,744 INFO L750 eck$LassoCheckResult]: Loop: 372606#L890-2 assume !false; 372605#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 372604#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 372603#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 372602#L898 assume 1 != cleanup_~tmp___0~1#1; 372600#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 372596#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 372595#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 372593#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 372594#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 379724#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 379723#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 379722#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 371414#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 370443#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 379175#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 372484#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 379174#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 372482#L2075-2 assume !(0 != ~persons_0~0); 378687#L2075-3 assume !(0 != ~persons_1~0); 376898#L2089-1 assume !(0 != ~persons_2~0); 376891#L2103-1 assume !(0 != ~persons_3~0); 376885#L2117-1 assume !(0 != ~persons_4~0); 376880#L2131-1 assume !(0 != ~persons_5~0); 376876#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376875#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 376845#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376830#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 376828#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 376826#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376825#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 376800#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376783#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 376781#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 376779#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376778#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 376694#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376673#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 376671#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 376669#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376668#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 376649#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376632#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 376593#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 376590#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376587#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 376242#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376214#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 376211#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 376209#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 376208#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 376185#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 376158#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 376138#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 376132#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 376088#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 376084#L2785-41 assume { :end_inline_resetCallOnFloor } true; 376052#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 376046#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 376021#L1295-5 assume { :end_inline_resetFloorButton } true; 376017#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 376016#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 375842#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 375712#L268-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 372673#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 372651#L1321-6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 372626#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 372625#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 372608#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 372606#L890-2 [2022-11-16 12:42:38,745 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:38,745 INFO L85 PathProgramCache]: Analyzing trace with hash -1962539134, now seen corresponding path program 1 times [2022-11-16 12:42:38,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:38,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2074486346] [2022-11-16 12:42:38,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:38,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:38,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:38,862 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:38,862 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:38,862 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2074486346] [2022-11-16 12:42:38,862 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2074486346] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:38,863 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:38,863 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:38,863 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1635237375] [2022-11-16 12:42:38,863 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:38,865 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:38,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:38,866 INFO L85 PathProgramCache]: Analyzing trace with hash 1680331697, now seen corresponding path program 1 times [2022-11-16 12:42:38,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:38,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1366869875] [2022-11-16 12:42:38,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:38,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:38,881 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:38,993 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:38,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:38,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1366869875] [2022-11-16 12:42:38,994 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1366869875] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:38,994 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:38,995 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:38,996 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119603736] [2022-11-16 12:42:38,996 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:38,996 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:38,997 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:38,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:38,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:38,998 INFO L87 Difference]: Start difference. First operand 14136 states and 26196 transitions. cyclomatic complexity: 12061 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:39,179 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:39,179 INFO L93 Difference]: Finished difference Result 14136 states and 26192 transitions. [2022-11-16 12:42:39,179 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14136 states and 26192 transitions. [2022-11-16 12:42:39,457 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:39,496 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14136 states to 14136 states and 26192 transitions. [2022-11-16 12:42:39,496 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14136 [2022-11-16 12:42:39,507 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14136 [2022-11-16 12:42:39,507 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14136 states and 26192 transitions. [2022-11-16 12:42:39,517 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:39,518 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26192 transitions. [2022-11-16 12:42:39,526 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14136 states and 26192 transitions. [2022-11-16 12:42:39,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14136 to 14136. [2022-11-16 12:42:39,668 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14136 states, 14136 states have (on average 1.8528579513299377) internal successors, (26192), 14135 states have internal predecessors, (26192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:39,698 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14136 states to 14136 states and 26192 transitions. [2022-11-16 12:42:39,699 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26192 transitions. [2022-11-16 12:42:39,699 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:39,700 INFO L428 stractBuchiCegarLoop]: Abstraction has 14136 states and 26192 transitions. [2022-11-16 12:42:39,700 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-11-16 12:42:39,700 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14136 states and 26192 transitions. [2022-11-16 12:42:39,745 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:39,745 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:39,745 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:39,751 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:39,751 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:39,751 INFO L748 eck$LassoCheckResult]: Stem: 399342#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 399343#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 399666#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 399667#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 400124#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 399324#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 398873#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 398874#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 400616#L104 assume !(0 == getOrigin_~person#1); 400074#L108 assume !(1 == getOrigin_~person#1); 398829#L112 assume !(2 == getOrigin_~person#1); 398830#L116 assume !(3 == getOrigin_~person#1); 400223#L120 assume !(4 == getOrigin_~person#1); 399991#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 399992#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 399909#L3009 assume !(0 == initPersonOnFloor_~floor#1); 399691#L3036 assume 1 == initPersonOnFloor_~floor#1; 399692#L3037 assume !(0 == initPersonOnFloor_~person#1); 400326#L3040 assume !(1 == initPersonOnFloor_~person#1); 399023#L3043 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 398869#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 400149#L2801 assume !(0 == callOnFloor_~floorID#1); 400492#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 399292#L2813-2 assume { :end_inline_callOnFloor } true; 400693#L3153 assume { :end_inline_initPersonOnFloor } true; 400692#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 400691#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 400690#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 400689#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 400596#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 400556#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 398839#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 398841#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 400688#L2073 assume !(0 != timeShift_~tmp___9~2#1); 399111#L2164 assume !(1 == ~doorState~0); 399112#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 398477#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 398478#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 399145#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 399886#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 399815#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 399817#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 400683#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 399685#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 398559#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 398448#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 398449#L1892-2 assume !(1 == ~currentHeading~0); 399703#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 399704#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 400067#L1908-5 assume { :end_inline_continueInDirection } true; 399865#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 399523#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 399524#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 398780#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 398781#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 399386#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 398632#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 398633#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 399907#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 399908#L890-2 [2022-11-16 12:42:39,752 INFO L750 eck$LassoCheckResult]: Loop: 399908#L890-2 assume !false; 407993#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 407992#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 407991#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 407990#L898 assume 1 != cleanup_~tmp___0~1#1; 407989#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 407988#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 407987#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 407984#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 407983#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 407982#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 407981#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 407980#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 406932#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 406929#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 406911#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 406912#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 412313#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 400714#L2075-2 assume !(0 != ~persons_0~0); 412301#L2075-3 assume !(0 != ~persons_1~0); 412277#L2089-1 assume !(0 != ~persons_2~0); 412275#L2103-1 assume !(0 != ~persons_3~0); 410664#L2117-1 assume !(0 != ~persons_4~0); 408933#L2131-1 assume !(0 != ~persons_5~0); 408929#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408928#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 408881#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408866#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 408864#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 408862#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408861#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 408836#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408794#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 408791#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 408789#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408787#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 408565#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408544#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 408542#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 408540#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408508#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 408465#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408442#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 408440#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 408438#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408436#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 408424#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408396#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 408394#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 408392#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 408391#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 408127#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 408045#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 408037#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 408033#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 408025#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 408021#L2785-41 assume { :end_inline_resetCallOnFloor } true; 408019#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 408018#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 408012#L1295-5 assume { :end_inline_resetFloorButton } true; 399039#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 408009#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 408008#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 408007#L268-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 408005#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 408006#L1321-6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 407996#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 407995#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 407994#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 399908#L890-2 [2022-11-16 12:42:39,752 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:39,752 INFO L85 PathProgramCache]: Analyzing trace with hash -1164849731, now seen corresponding path program 1 times [2022-11-16 12:42:39,753 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:39,753 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1820179153] [2022-11-16 12:42:39,753 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:39,753 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:39,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:39,853 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:39,854 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:39,854 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1820179153] [2022-11-16 12:42:39,854 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1820179153] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:39,854 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:39,854 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:39,855 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [865149355] [2022-11-16 12:42:39,855 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:39,855 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:39,855 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:39,856 INFO L85 PathProgramCache]: Analyzing trace with hash 1680331697, now seen corresponding path program 2 times [2022-11-16 12:42:39,856 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:39,856 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [272179490] [2022-11-16 12:42:39,856 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:39,856 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:39,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:39,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:39,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:39,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [272179490] [2022-11-16 12:42:39,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [272179490] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:39,951 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:39,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:39,951 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [205654659] [2022-11-16 12:42:39,951 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:39,951 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:39,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:39,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:39,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:39,952 INFO L87 Difference]: Start difference. First operand 14136 states and 26192 transitions. cyclomatic complexity: 12057 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:40,090 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:40,090 INFO L93 Difference]: Finished difference Result 14136 states and 26188 transitions. [2022-11-16 12:42:40,090 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14136 states and 26188 transitions. [2022-11-16 12:42:40,156 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:40,203 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14136 states to 14136 states and 26188 transitions. [2022-11-16 12:42:40,203 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14136 [2022-11-16 12:42:40,215 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14136 [2022-11-16 12:42:40,215 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14136 states and 26188 transitions. [2022-11-16 12:42:40,226 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:40,226 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26188 transitions. [2022-11-16 12:42:40,235 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14136 states and 26188 transitions. [2022-11-16 12:42:40,523 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14136 to 14136. [2022-11-16 12:42:40,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14136 states, 14136 states have (on average 1.8525749858517262) internal successors, (26188), 14135 states have internal predecessors, (26188), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:40,565 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14136 states to 14136 states and 26188 transitions. [2022-11-16 12:42:40,566 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14136 states and 26188 transitions. [2022-11-16 12:42:40,566 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:40,567 INFO L428 stractBuchiCegarLoop]: Abstraction has 14136 states and 26188 transitions. [2022-11-16 12:42:40,567 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-11-16 12:42:40,567 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14136 states and 26188 transitions. [2022-11-16 12:42:40,613 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:40,613 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:40,613 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:40,618 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:40,618 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:40,619 INFO L748 eck$LassoCheckResult]: Stem: 427624#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 427625#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 427951#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 427952#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 428383#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 427605#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 427160#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 427161#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 428848#L104 assume !(0 == getOrigin_~person#1); 428340#L108 assume !(1 == getOrigin_~person#1); 427116#L112 assume !(2 == getOrigin_~person#1); 427117#L116 assume !(3 == getOrigin_~person#1); 428482#L120 assume !(4 == getOrigin_~person#1); 428262#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 428263#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 428184#L3009 assume !(0 == initPersonOnFloor_~floor#1); 427973#L3036 assume !(1 == initPersonOnFloor_~floor#1); 427613#L3063 assume !(2 == initPersonOnFloor_~floor#1); 427243#L3090 assume !(3 == initPersonOnFloor_~floor#1); 427245#L3117 assume !(4 == initPersonOnFloor_~floor#1); 427156#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 428408#L2801 assume !(0 == callOnFloor_~floorID#1); 428739#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 427575#L2813-2 assume { :end_inline_callOnFloor } true; 427751#L3153 assume { :end_inline_initPersonOnFloor } true; 428919#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 428918#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 428917#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 428916#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 428828#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 428793#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 427126#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 427128#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 428914#L2073 assume !(0 != timeShift_~tmp___9~2#1); 427393#L2164 assume !(1 == ~doorState~0); 427394#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 426762#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 426763#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 427429#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 428161#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 428093#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 428095#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 428909#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 427967#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 426844#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 426734#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 426735#L1892-2 assume !(1 == ~currentHeading~0); 427984#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 427985#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 428334#L1908-5 assume { :end_inline_continueInDirection } true; 428141#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 427800#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 427801#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 428092#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 435371#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 435370#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 426917#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 426918#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 434240#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 428961#L890-2 [2022-11-16 12:42:40,619 INFO L750 eck$LassoCheckResult]: Loop: 428961#L890-2 assume !false; 428960#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 428959#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 428958#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 428957#L898 assume 1 != cleanup_~tmp___0~1#1; 428956#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 428950#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 428947#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 428942#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 428943#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 437722#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 437721#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 437720#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 437719#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 437715#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 437706#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 437700#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 437698#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 437695#L2075-2 assume !(0 != ~persons_0~0); 437684#L2075-3 assume !(0 != ~persons_1~0); 436794#L2089-1 assume !(0 != ~persons_2~0); 436788#L2103-1 assume !(0 != ~persons_3~0); 436782#L2117-1 assume !(0 != ~persons_4~0); 436776#L2131-1 assume !(0 != ~persons_5~0); 436772#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436771#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 436724#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436709#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 436707#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 436705#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436704#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 436679#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436662#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 436660#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 436658#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436651#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 436275#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436254#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 436252#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 436250#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436249#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 436230#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436207#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 436205#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 436203#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436202#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 436141#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436119#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 436117#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 436115#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 436114#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 436105#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 436079#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 436077#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 436078#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 437769#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 435649#L2785-41 assume { :end_inline_resetCallOnFloor } true; 435648#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 434612#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 434347#L1295-5 assume { :end_inline_resetFloorButton } true; 434280#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 434281#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 434277#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 434275#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 434256#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 434261#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 434259#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 434253#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 434241#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 428961#L890-2 [2022-11-16 12:42:40,620 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:40,620 INFO L85 PathProgramCache]: Analyzing trace with hash -541671107, now seen corresponding path program 1 times [2022-11-16 12:42:40,620 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:40,620 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1425583800] [2022-11-16 12:42:40,621 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:40,621 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:40,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:40,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:40,698 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:40,698 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1425583800] [2022-11-16 12:42:40,698 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1425583800] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:40,699 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:40,699 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:40,699 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1148166331] [2022-11-16 12:42:40,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:40,699 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:40,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:40,700 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 4 times [2022-11-16 12:42:40,700 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:40,700 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [805106151] [2022-11-16 12:42:40,700 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:40,700 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:40,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:40,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:40,797 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:40,797 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [805106151] [2022-11-16 12:42:40,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [805106151] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:40,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:40,797 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:40,798 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1127592559] [2022-11-16 12:42:40,798 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:40,798 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:40,799 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:40,799 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:40,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:40,800 INFO L87 Difference]: Start difference. First operand 14136 states and 26188 transitions. cyclomatic complexity: 12053 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:40,893 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:40,893 INFO L93 Difference]: Finished difference Result 14115 states and 26154 transitions. [2022-11-16 12:42:40,893 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14115 states and 26154 transitions. [2022-11-16 12:42:40,956 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:41,002 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14115 states to 14115 states and 26154 transitions. [2022-11-16 12:42:41,002 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14115 [2022-11-16 12:42:41,013 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14115 [2022-11-16 12:42:41,014 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14115 states and 26154 transitions. [2022-11-16 12:42:41,024 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:41,024 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26154 transitions. [2022-11-16 12:42:41,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14115 states and 26154 transitions. [2022-11-16 12:42:41,146 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14115 to 14115. [2022-11-16 12:42:41,156 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14115 states, 14115 states have (on average 1.852922422954304) internal successors, (26154), 14114 states have internal predecessors, (26154), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:41,178 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14115 states to 14115 states and 26154 transitions. [2022-11-16 12:42:41,178 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26154 transitions. [2022-11-16 12:42:41,178 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:41,179 INFO L428 stractBuchiCegarLoop]: Abstraction has 14115 states and 26154 transitions. [2022-11-16 12:42:41,179 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-11-16 12:42:41,179 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14115 states and 26154 transitions. [2022-11-16 12:42:41,213 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:41,213 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:41,213 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:41,217 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:41,217 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:41,218 INFO L748 eck$LassoCheckResult]: Stem: 455888#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 455889#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 456213#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 456214#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 456641#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 455871#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 455426#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 455427#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 457100#L104 assume !(0 == getOrigin_~person#1); 456597#L108 assume !(1 == getOrigin_~person#1); 455382#L112 assume !(2 == getOrigin_~person#1); 455383#L116 assume !(3 == getOrigin_~person#1); 456740#L120 assume !(4 == getOrigin_~person#1); 456519#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 456520#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 456444#L3009 assume !(0 == initPersonOnFloor_~floor#1); 456237#L3036 assume 1 == initPersonOnFloor_~floor#1; 456238#L3037 assume !(0 == initPersonOnFloor_~person#1); 456843#L3040 assume !(1 == initPersonOnFloor_~person#1); 455568#L3043 assume !(2 == initPersonOnFloor_~person#1); 455569#L3046 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 455422#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 456664#L2801 assume !(0 == callOnFloor_~floorID#1); 456986#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 455841#L2813-2 assume { :end_inline_callOnFloor } true; 457166#L3153 assume { :end_inline_initPersonOnFloor } true; 457165#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 457164#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 457163#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 457162#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 457081#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 457044#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 455392#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 455394#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 457160#L2073 assume !(0 != timeShift_~tmp___9~2#1); 455657#L2164 assume !(1 == ~doorState~0); 455658#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 455027#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 455028#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 455695#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 456424#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 456358#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 456360#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 457156#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 456231#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 455109#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 454999#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 455000#L1892-2 assume !(1 == ~currentHeading~0); 456249#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 456250#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 456592#L1908-5 assume { :end_inline_continueInDirection } true; 456404#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 456062#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 456063#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 456357#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 459173#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 459169#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 459160#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 459159#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 459157#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 459158#L890-2 [2022-11-16 12:42:41,218 INFO L750 eck$LassoCheckResult]: Loop: 459158#L890-2 assume !false; 465128#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 465127#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 465126#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 465125#L898 assume 1 != cleanup_~tmp___0~1#1; 465115#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 459134#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 459135#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 459129#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 459130#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 468437#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 468436#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 468435#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 456228#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 455279#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 468623#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 455835#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 455836#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 463768#L2075-2 assume !(0 != ~persons_0~0); 463757#L2075-3 assume !(0 != ~persons_1~0); 463702#L2089-1 assume !(0 != ~persons_2~0); 463696#L2103-1 assume !(0 != ~persons_3~0); 463690#L2117-1 assume !(0 != ~persons_4~0); 463684#L2131-1 assume !(0 != ~persons_5~0); 463680#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 463679#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 463632#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 463617#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 463615#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 463613#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 463612#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 463587#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 463576#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 463574#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 463575#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 465405#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 465388#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 465373#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 465371#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 465372#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 468422#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 468403#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 463333#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 463325#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 463322#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 463321#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 462643#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 462615#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 462613#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 462611#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 462610#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 462442#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 462416#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 462370#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 462368#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 462341#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 462329#L2785-41 assume { :end_inline_resetCallOnFloor } true; 462324#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 462316#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 462301#L1295-5 assume { :end_inline_resetFloorButton } true; 462298#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 462297#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 462295#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 462296#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 465132#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 465137#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 465135#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 465130#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 465129#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 459158#L890-2 [2022-11-16 12:42:41,219 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:41,219 INFO L85 PathProgramCache]: Analyzing trace with hash 806650685, now seen corresponding path program 1 times [2022-11-16 12:42:41,220 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:41,220 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1981224182] [2022-11-16 12:42:41,220 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:41,220 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:41,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:41,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:41,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:41,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1981224182] [2022-11-16 12:42:41,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1981224182] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:41,397 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:41,397 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:41,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [531647748] [2022-11-16 12:42:41,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:41,398 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:41,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:41,398 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 5 times [2022-11-16 12:42:41,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:41,399 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1837010893] [2022-11-16 12:42:41,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:41,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:41,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:41,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:41,487 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:41,487 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1837010893] [2022-11-16 12:42:41,487 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1837010893] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:41,487 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:41,488 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:41,488 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1594986780] [2022-11-16 12:42:41,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:41,488 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:41,488 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:41,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:41,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:41,489 INFO L87 Difference]: Start difference. First operand 14115 states and 26154 transitions. cyclomatic complexity: 12040 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:41,592 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:41,592 INFO L93 Difference]: Finished difference Result 14115 states and 26153 transitions. [2022-11-16 12:42:41,592 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14115 states and 26153 transitions. [2022-11-16 12:42:41,649 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:41,683 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14115 states to 14115 states and 26153 transitions. [2022-11-16 12:42:41,684 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14115 [2022-11-16 12:42:41,693 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14115 [2022-11-16 12:42:41,693 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14115 states and 26153 transitions. [2022-11-16 12:42:41,700 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:41,700 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26153 transitions. [2022-11-16 12:42:41,707 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14115 states and 26153 transitions. [2022-11-16 12:42:41,808 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14115 to 14115. [2022-11-16 12:42:41,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14115 states, 14115 states have (on average 1.85285157633723) internal successors, (26153), 14114 states have internal predecessors, (26153), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:41,839 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14115 states to 14115 states and 26153 transitions. [2022-11-16 12:42:41,840 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26153 transitions. [2022-11-16 12:42:41,840 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:41,840 INFO L428 stractBuchiCegarLoop]: Abstraction has 14115 states and 26153 transitions. [2022-11-16 12:42:41,841 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-11-16 12:42:41,841 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14115 states and 26153 transitions. [2022-11-16 12:42:41,874 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:41,874 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:41,875 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:41,878 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:41,878 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:41,879 INFO L748 eck$LassoCheckResult]: Stem: 484132#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 484133#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 484454#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 484455#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 484893#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 484115#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 483670#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 483671#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 485357#L104 assume !(0 == getOrigin_~person#1); 484849#L108 assume !(1 == getOrigin_~person#1); 483626#L112 assume !(2 == getOrigin_~person#1); 483627#L116 assume !(3 == getOrigin_~person#1); 484991#L120 assume !(4 == getOrigin_~person#1); 484769#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 484770#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 484690#L3009 assume !(0 == initPersonOnFloor_~floor#1); 484479#L3036 assume 1 == initPersonOnFloor_~floor#1; 484480#L3037 assume !(0 == initPersonOnFloor_~person#1); 485100#L3040 assume !(1 == initPersonOnFloor_~person#1); 483812#L3043 assume !(2 == initPersonOnFloor_~person#1); 483813#L3046 assume !(3 == initPersonOnFloor_~person#1); 485304#L3049 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 483666#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 484916#L2801 assume !(0 == callOnFloor_~floorID#1); 485244#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 484085#L2813-2 assume { :end_inline_callOnFloor } true; 485432#L3153 assume { :end_inline_initPersonOnFloor } true; 485431#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 485430#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 485429#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 485428#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 485338#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 485302#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 483636#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 483638#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 485426#L2073 assume !(0 != timeShift_~tmp___9~2#1); 483902#L2164 assume !(1 == ~doorState~0); 483903#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 483271#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 483272#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 483939#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 484670#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 484602#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 484604#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 485422#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 484473#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 483353#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 483243#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 483244#L1892-2 assume !(1 == ~currentHeading~0); 484490#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 484491#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484843#L1908-5 assume { :end_inline_continueInDirection } true; 484650#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 490727#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 490726#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 490725#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 490723#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 490719#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 490710#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 490709#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 490708#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 490704#L890-2 [2022-11-16 12:42:41,879 INFO L750 eck$LassoCheckResult]: Loop: 490704#L890-2 assume !false; 490705#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 490700#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 490701#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 490696#L898 assume 1 != cleanup_~tmp___0~1#1; 490697#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 490689#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 490690#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 490681#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 490682#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 496597#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 496596#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 496592#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 496589#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 496582#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 496580#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 496161#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 485228#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 483839#L2075-2 assume !(0 != ~persons_0~0); 483840#L2075-3 assume !(0 != ~persons_1~0); 495931#L2089-1 assume !(0 != ~persons_2~0); 495929#L2103-1 assume !(0 != ~persons_3~0); 495087#L2117-1 assume !(0 != ~persons_4~0); 495077#L2131-1 assume !(0 != ~persons_5~0); 495072#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 495070#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 495030#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 495020#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 495019#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 483804#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 483805#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 484926#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 483308#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 484003#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 485400#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 496025#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 496006#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 483932#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 483933#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 485407#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 495968#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 495912#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 494996#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 494993#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 494367#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 494366#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 494353#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 494325#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 494323#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 494321#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 494320#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 494084#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 494058#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 494036#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 493933#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 493907#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 493901#L2785-41 assume { :end_inline_resetCallOnFloor } true; 493897#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 493889#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 493874#L1295-5 assume { :end_inline_resetFloorButton } true; 493871#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 493870#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 493867#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 493866#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 493858#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 493861#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 493860#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 490728#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 490729#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 490704#L890-2 [2022-11-16 12:42:41,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:41,879 INFO L85 PathProgramCache]: Analyzing trace with hash 511586840, now seen corresponding path program 1 times [2022-11-16 12:42:41,880 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:41,880 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136935612] [2022-11-16 12:42:41,880 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:41,880 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:41,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:41,950 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:41,951 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:41,951 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136935612] [2022-11-16 12:42:41,951 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2136935612] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:41,951 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:41,951 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:41,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [320117552] [2022-11-16 12:42:41,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:41,952 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:41,952 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:41,953 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 6 times [2022-11-16 12:42:41,953 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:41,953 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [538225274] [2022-11-16 12:42:41,953 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:41,953 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:41,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:42,033 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:42,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:42,034 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [538225274] [2022-11-16 12:42:42,034 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [538225274] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:42,034 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:42,034 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:42,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [524451723] [2022-11-16 12:42:42,035 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:42,035 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:42,035 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:42,036 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:42,036 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:42,036 INFO L87 Difference]: Start difference. First operand 14115 states and 26153 transitions. cyclomatic complexity: 12039 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:42,133 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:42,134 INFO L93 Difference]: Finished difference Result 14115 states and 26152 transitions. [2022-11-16 12:42:42,134 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14115 states and 26152 transitions. [2022-11-16 12:42:42,288 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:42,325 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14115 states to 14115 states and 26152 transitions. [2022-11-16 12:42:42,325 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14115 [2022-11-16 12:42:42,335 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14115 [2022-11-16 12:42:42,336 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14115 states and 26152 transitions. [2022-11-16 12:42:42,344 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:42,345 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26152 transitions. [2022-11-16 12:42:42,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14115 states and 26152 transitions. [2022-11-16 12:42:42,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14115 to 14115. [2022-11-16 12:42:42,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14115 states, 14115 states have (on average 1.852780729720156) internal successors, (26152), 14114 states have internal predecessors, (26152), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:42,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14115 states to 14115 states and 26152 transitions. [2022-11-16 12:42:42,507 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26152 transitions. [2022-11-16 12:42:42,508 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-16 12:42:42,508 INFO L428 stractBuchiCegarLoop]: Abstraction has 14115 states and 26152 transitions. [2022-11-16 12:42:42,509 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-11-16 12:42:42,509 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14115 states and 26152 transitions. [2022-11-16 12:42:42,552 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:42,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:42,552 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:42,557 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:42,557 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:42,558 INFO L748 eck$LassoCheckResult]: Stem: 512376#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 512377#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 512699#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 512700#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 513138#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 512359#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 511914#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 511915#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 513607#L104 assume !(0 == getOrigin_~person#1); 513094#L108 assume !(1 == getOrigin_~person#1); 511870#L112 assume !(2 == getOrigin_~person#1); 511871#L116 assume !(3 == getOrigin_~person#1); 513240#L120 assume !(4 == getOrigin_~person#1); 513014#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 513015#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 512937#L3009 assume !(0 == initPersonOnFloor_~floor#1); 512722#L3036 assume 1 == initPersonOnFloor_~floor#1; 512723#L3037 assume !(0 == initPersonOnFloor_~person#1); 513346#L3040 assume !(1 == initPersonOnFloor_~person#1); 512058#L3043 assume !(2 == initPersonOnFloor_~person#1); 512059#L3046 assume !(3 == initPersonOnFloor_~person#1); 513551#L3049 assume !(4 == initPersonOnFloor_~person#1); 511909#L3052 assume !(5 == initPersonOnFloor_~person#1); 511910#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 513162#L2801 assume !(0 == callOnFloor_~floorID#1); 513491#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 512329#L2813-2 assume { :end_inline_callOnFloor } true; 513680#L3153 assume { :end_inline_initPersonOnFloor } true; 513679#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 513678#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 513677#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 513676#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 513588#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 513549#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 511880#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 511882#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 513674#L2073 assume !(0 != timeShift_~tmp___9~2#1); 512147#L2164 assume !(1 == ~doorState~0); 512148#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511515#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 511516#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 512184#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 512917#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 512849#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 512851#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 513670#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 512715#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 511597#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 511487#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 511488#L1892-2 assume !(1 == ~currentHeading~0); 512736#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 512737#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 513088#L1908-5 assume { :end_inline_continueInDirection } true; 512896#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 512550#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 512551#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 512848#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 515685#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 515681#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 515672#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 515671#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 515668#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 515669#L890-2 [2022-11-16 12:42:42,558 INFO L750 eck$LassoCheckResult]: Loop: 515669#L890-2 assume !false; 521638#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 521637#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 521636#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 521635#L898 assume 1 != cleanup_~tmp___0~1#1; 521625#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 515647#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 515648#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 515643#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 513461#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 513462#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 513539#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 511898#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 511899#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 511766#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 524993#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 512323#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 512324#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 520279#L2075-2 assume !(0 != ~persons_0~0); 520268#L2075-3 assume !(0 != ~persons_1~0); 520213#L2089-1 assume !(0 != ~persons_2~0); 520207#L2103-1 assume !(0 != ~persons_3~0); 520201#L2117-1 assume !(0 != ~persons_4~0); 520195#L2131-1 assume !(0 != ~persons_5~0); 520191#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 520190#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 520143#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 520128#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 520126#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 520124#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 520123#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 520098#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 520087#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 520085#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 520086#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 521914#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 521897#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 521882#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 521881#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 511737#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 511883#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 511884#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 519844#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 519836#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 519833#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 519832#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 519154#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 519126#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 519124#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 519122#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 519121#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 518953#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 518927#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 518881#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 518879#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 518852#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 518840#L2785-41 assume { :end_inline_resetCallOnFloor } true; 518835#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 518827#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 518812#L1295-5 assume { :end_inline_resetFloorButton } true; 518809#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 518808#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 518806#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 518807#L268-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 521654#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 521655#L1321-6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 521641#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 521640#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 521639#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 515669#L890-2 [2022-11-16 12:42:42,559 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:42,559 INFO L85 PathProgramCache]: Analyzing trace with hash 1595667638, now seen corresponding path program 1 times [2022-11-16 12:42:42,559 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:42,559 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468540687] [2022-11-16 12:42:42,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:42,560 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:42,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:42,613 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:42,613 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:42,613 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [468540687] [2022-11-16 12:42:42,613 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [468540687] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:42,614 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:42,614 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:42,614 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1713685369] [2022-11-16 12:42:42,614 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:42,615 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:42,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:42,615 INFO L85 PathProgramCache]: Analyzing trace with hash 1680331697, now seen corresponding path program 3 times [2022-11-16 12:42:42,616 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:42,616 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481067093] [2022-11-16 12:42:42,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:42,616 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:42,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:42,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:42,699 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:42,699 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481067093] [2022-11-16 12:42:42,699 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1481067093] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:42,700 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:42,700 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:42,700 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1664044496] [2022-11-16 12:42:42,700 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:42,700 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:42,700 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:42,701 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:42:42,701 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:42:42,701 INFO L87 Difference]: Start difference. First operand 14115 states and 26152 transitions. cyclomatic complexity: 12038 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:42,772 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:42,773 INFO L93 Difference]: Finished difference Result 14115 states and 26151 transitions. [2022-11-16 12:42:42,773 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14115 states and 26151 transitions. [2022-11-16 12:42:42,834 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:42,866 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14115 states to 14115 states and 26151 transitions. [2022-11-16 12:42:42,866 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14115 [2022-11-16 12:42:42,875 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14115 [2022-11-16 12:42:42,875 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14115 states and 26151 transitions. [2022-11-16 12:42:42,882 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:42,882 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26151 transitions. [2022-11-16 12:42:42,889 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14115 states and 26151 transitions. [2022-11-16 12:42:43,174 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14115 to 14115. [2022-11-16 12:42:43,185 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14115 states, 14115 states have (on average 1.852709883103082) internal successors, (26151), 14114 states have internal predecessors, (26151), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:43,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14115 states to 14115 states and 26151 transitions. [2022-11-16 12:42:43,218 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14115 states and 26151 transitions. [2022-11-16 12:42:43,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:42:43,218 INFO L428 stractBuchiCegarLoop]: Abstraction has 14115 states and 26151 transitions. [2022-11-16 12:42:43,218 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-11-16 12:42:43,219 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14115 states and 26151 transitions. [2022-11-16 12:42:43,261 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11168 [2022-11-16 12:42:43,261 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:43,261 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:43,265 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:43,265 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:43,266 INFO L748 eck$LassoCheckResult]: Stem: 540618#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 540619#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 540937#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 540938#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 541371#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 540601#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 540156#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 540157#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 541837#L104 assume !(0 == getOrigin_~person#1); 541326#L108 assume !(1 == getOrigin_~person#1); 540112#L112 assume !(2 == getOrigin_~person#1); 540113#L116 assume !(3 == getOrigin_~person#1); 541472#L120 assume !(4 == getOrigin_~person#1); 541246#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 541247#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 541171#L3009 assume !(0 == initPersonOnFloor_~floor#1); 540960#L3036 assume 1 == initPersonOnFloor_~floor#1; 540961#L3037 assume !(0 == initPersonOnFloor_~person#1); 541577#L3040 assume !(1 == initPersonOnFloor_~person#1); 540297#L3043 assume !(2 == initPersonOnFloor_~person#1); 540298#L3046 assume !(3 == initPersonOnFloor_~person#1); 541780#L3049 assume !(4 == initPersonOnFloor_~person#1); 540151#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 540152#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 541394#L2801 assume !(0 == callOnFloor_~floorID#1); 541720#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 540570#L2813-2 assume { :end_inline_callOnFloor } true; 541911#L3153 assume { :end_inline_initPersonOnFloor } true; 541910#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 541909#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 541908#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 541907#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 541817#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 541778#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 540122#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 540124#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 541905#L2073 assume !(0 != timeShift_~tmp___9~2#1); 540387#L2164 assume !(1 == ~doorState~0); 540388#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 539756#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 539757#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 540423#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 541150#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 541082#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 541084#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 541901#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 540954#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 539838#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 539728#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 539729#L1892-2 assume !(1 == ~currentHeading~0); 540973#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 540974#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 541321#L1908-5 assume { :end_inline_continueInDirection } true; 541130#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 540790#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 540791#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 541081#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 547229#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 547225#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 547216#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 547215#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 547214#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 547210#L890-2 [2022-11-16 12:42:43,269 INFO L750 eck$LassoCheckResult]: Loop: 547210#L890-2 assume !false; 543912#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 543886#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 543883#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 543880#L898 assume 1 != cleanup_~tmp___0~1#1; 543876#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 543875#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 543873#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 543869#L1420 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 543870#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 552808#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 552806#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 552804#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 552799#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 552794#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 552772#L1925-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 552771#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 541705#L2073-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 540324#L2075-2 assume !(0 != ~persons_0~0); 540325#L2075-3 assume !(0 != ~persons_1~0); 540047#L2089-1 assume !(0 != ~persons_2~0); 550762#L2103-1 assume !(0 != ~persons_3~0); 550756#L2117-1 assume !(0 != ~persons_4~0); 550750#L2131-1 assume !(0 != ~persons_5~0); 550746#L2145-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret67#1, processWaitingOnFloor_#t~ret68#1, processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~18#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~18#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 550745#L2829-12 assume 0 == isPersonOnFloor_~floor#1; 550698#L2830-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 550683#L3001-6 processWaitingOnFloor_#t~ret67#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret67#1;havoc processWaitingOnFloor_#t~ret67#1; 550681#L1975-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 550679#L1975-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 550678#L2829-14 assume 0 == isPersonOnFloor_~floor#1; 550653#L2830-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 550636#L3001-7 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 550634#L1988-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 550632#L1988-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 550631#L2829-16 assume 0 == isPersonOnFloor_~floor#1; 550610#L2830-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 550595#L3001-8 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 550593#L2001-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 550594#L2001-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 551495#L2829-18 assume 0 == isPersonOnFloor_~floor#1; 551476#L2830-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 551453#L3001-9 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 551451#L2014-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 551449#L2014-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 551448#L2829-20 assume 0 == isPersonOnFloor_~floor#1; 551434#L2830-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 551412#L3001-10 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 551411#L2027-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 540963#L2027-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~24#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~24#1; 541541#L2829-22 assume 0 == isPersonOnFloor_~floor#1; 541753#L2830-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~24#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~24#1; 539804#L3001-11 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 539809#L2040-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 539810#L2040-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 541211#L2773-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 541212#L2785-41 assume { :end_inline_resetCallOnFloor } true; 550053#L2053-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 550045#L1283-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 550031#L1295-5 assume { :end_inline_resetFloorButton } true; 550028#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 550027#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 550026#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 550024#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 547237#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 547242#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 547240#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 547233#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 547213#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 547210#L890-2 [2022-11-16 12:42:43,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:43,269 INFO L85 PathProgramCache]: Analyzing trace with hash -1327492360, now seen corresponding path program 1 times [2022-11-16 12:42:43,270 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:43,270 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1483737265] [2022-11-16 12:42:43,270 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:43,270 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:43,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:43,324 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:43,325 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:43,325 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1483737265] [2022-11-16 12:42:43,325 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1483737265] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:43,325 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:43,325 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-16 12:42:43,326 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1516532976] [2022-11-16 12:42:43,326 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:43,326 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:43,326 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:43,327 INFO L85 PathProgramCache]: Analyzing trace with hash -2124508301, now seen corresponding path program 7 times [2022-11-16 12:42:43,327 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:43,327 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1956241749] [2022-11-16 12:42:43,327 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:43,327 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:43,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:43,425 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:43,425 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:43,425 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1956241749] [2022-11-16 12:42:43,425 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1956241749] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:43,425 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:43,426 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:43,426 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1174698892] [2022-11-16 12:42:43,426 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:43,426 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:43,427 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:43,427 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:42:43,427 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:42:43,427 INFO L87 Difference]: Start difference. First operand 14115 states and 26151 transitions. cyclomatic complexity: 12037 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 2 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:43,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:43,555 INFO L93 Difference]: Finished difference Result 14338 states and 26492 transitions. [2022-11-16 12:42:43,555 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14338 states and 26492 transitions. [2022-11-16 12:42:43,641 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11391 [2022-11-16 12:42:43,698 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14338 states to 14338 states and 26492 transitions. [2022-11-16 12:42:43,698 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14338 [2022-11-16 12:42:43,712 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14338 [2022-11-16 12:42:43,712 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14338 states and 26492 transitions. [2022-11-16 12:42:43,725 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:43,726 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14338 states and 26492 transitions. [2022-11-16 12:42:43,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14338 states and 26492 transitions. [2022-11-16 12:42:43,923 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14338 to 14307. [2022-11-16 12:42:43,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14307 states, 14307 states have (on average 1.8494443279513524) internal successors, (26460), 14306 states have internal predecessors, (26460), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:43,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14307 states to 14307 states and 26460 transitions. [2022-11-16 12:42:43,979 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14307 states and 26460 transitions. [2022-11-16 12:42:43,980 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:42:43,980 INFO L428 stractBuchiCegarLoop]: Abstraction has 14307 states and 26460 transitions. [2022-11-16 12:42:43,980 INFO L335 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-11-16 12:42:43,981 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14307 states and 26460 transitions. [2022-11-16 12:42:44,037 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11360 [2022-11-16 12:42:44,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:44,038 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:44,043 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:44,043 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:44,044 INFO L748 eck$LassoCheckResult]: Stem: 569085#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 569086#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 569416#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 569417#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 569872#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 569070#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 568623#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 568624#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 570359#L104 assume !(0 == getOrigin_~person#1); 569828#L108 assume !(1 == getOrigin_~person#1); 568579#L112 assume !(2 == getOrigin_~person#1); 568580#L116 assume !(3 == getOrigin_~person#1); 569977#L120 assume !(4 == getOrigin_~person#1); 569738#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 569739#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 569657#L3009 assume !(0 == initPersonOnFloor_~floor#1); 569441#L3036 assume 1 == initPersonOnFloor_~floor#1; 569442#L3037 assume !(0 == initPersonOnFloor_~person#1); 570079#L3040 assume !(1 == initPersonOnFloor_~person#1); 568769#L3043 assume !(2 == initPersonOnFloor_~person#1); 568770#L3046 assume !(3 == initPersonOnFloor_~person#1); 570298#L3049 assume !(4 == initPersonOnFloor_~person#1); 568618#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 568619#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 569896#L2801 assume !(0 == callOnFloor_~floorID#1); 570235#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 569038#L2813-2 assume { :end_inline_callOnFloor } true; 570442#L3153 assume { :end_inline_initPersonOnFloor } true; 570441#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 570440#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 570439#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 570438#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 570337#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 570295#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 568589#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 568591#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 570437#L2073 assume !(0 != timeShift_~tmp___9~2#1); 568857#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 568858#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 568219#L1516 assume !(1 == stopRequestedInDirection_~dir#1); 568220#L1685 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 568891#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 569637#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 569568#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 569570#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 570433#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 569436#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 568302#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 568192#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 568193#L1892-2 assume !(1 == ~currentHeading~0); 569453#L1902-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 569454#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 569818#L1908-5 assume { :end_inline_continueInDirection } true; 569616#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571331#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 571330#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 571329#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 571327#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 571323#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 571314#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 571313#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 571312#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 571304#L890-2 [2022-11-16 12:42:44,044 INFO L750 eck$LassoCheckResult]: Loop: 571304#L890-2 assume !false; 571303#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 571218#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 571126#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 571124#L898 assume 1 != cleanup_~tmp___0~1#1; 571120#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 571117#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 571104#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 570888#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 570890#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 571676#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 571638#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 571633#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 571600#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 571588#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 571580#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 571575#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 571493#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 571487#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 571351#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 571334#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 571305#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 571298#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 571269#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 571260#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 571229#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 571091#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 571085#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 571083#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 571081#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 571080#L1685-2 assume !(0 == ~currentFloorID~0); 571078#L1691-2 assume ~currentFloorID~0 > 0; 571076#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 571077#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 571079#L2765-32 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 571074#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 571075#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 571125#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 571389#L1892-3 assume !(1 == ~currentHeading~0); 571383#L1902-9 assume !(0 == ~currentFloorID~0); 571378#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 571375#L1908-7 assume { :end_inline_continueInDirection } true; 571373#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571372#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 571371#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 571370#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 571369#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 571365#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 571366#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 574293#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 574292#L890-2 assume !false; 574291#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 574290#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 574289#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 574288#L898 assume 1 != cleanup_~tmp___0~1#1; 574287#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 574286#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 574285#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 574284#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 574282#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 574283#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 574692#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 574691#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 574682#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 574674#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 574673#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 574672#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 574670#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 574671#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 582417#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 582416#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 582415#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 582414#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 582413#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 582412#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 579568#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 569146#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 569901#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 569902#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 568520#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 568521#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 569727#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 569729#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 571731#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 570434#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 570435#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 571521#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 571517#L1892-5 assume !(1 == ~currentHeading~0); 571511#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 571506#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 571503#L1908-11 assume { :end_inline_continueInDirection } true; 571500#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571499#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 571498#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 571489#L268-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 571480#L270-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 571476#L1321-6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 571357#L274-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 571341#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 571311#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 571304#L890-2 [2022-11-16 12:42:44,045 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:44,046 INFO L85 PathProgramCache]: Analyzing trace with hash -1468040970, now seen corresponding path program 1 times [2022-11-16 12:42:44,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:44,046 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105926582] [2022-11-16 12:42:44,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:44,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:44,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:44,134 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:44,134 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:44,134 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105926582] [2022-11-16 12:42:44,134 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105926582] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:44,135 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:44,135 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:44,135 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [514198862] [2022-11-16 12:42:44,135 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:44,135 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:44,136 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:44,136 INFO L85 PathProgramCache]: Analyzing trace with hash 308130520, now seen corresponding path program 1 times [2022-11-16 12:42:44,136 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:44,136 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1312820204] [2022-11-16 12:42:44,137 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:44,137 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:44,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:44,268 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 12:42:44,268 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:44,268 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1312820204] [2022-11-16 12:42:44,268 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1312820204] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:44,269 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:44,269 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:44,269 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [570387137] [2022-11-16 12:42:44,269 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:44,269 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:44,269 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:44,270 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-16 12:42:44,270 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-16 12:42:44,270 INFO L87 Difference]: Start difference. First operand 14307 states and 26460 transitions. cyclomatic complexity: 12154 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:44,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:44,771 INFO L93 Difference]: Finished difference Result 46011 states and 85137 transitions. [2022-11-16 12:42:44,771 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46011 states and 85137 transitions. [2022-11-16 12:42:44,928 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 42979 [2022-11-16 12:42:45,037 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46011 states to 46011 states and 85137 transitions. [2022-11-16 12:42:45,037 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46011 [2022-11-16 12:42:45,065 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46011 [2022-11-16 12:42:45,066 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46011 states and 85137 transitions. [2022-11-16 12:42:45,088 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:45,088 INFO L218 hiAutomatonCegarLoop]: Abstraction has 46011 states and 85137 transitions. [2022-11-16 12:42:45,110 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46011 states and 85137 transitions. [2022-11-16 12:42:45,347 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46011 to 25402. [2022-11-16 12:42:45,365 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25402 states, 25402 states have (on average 1.8480040941658138) internal successors, (46943), 25401 states have internal predecessors, (46943), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:45,408 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25402 states to 25402 states and 46943 transitions. [2022-11-16 12:42:45,409 INFO L240 hiAutomatonCegarLoop]: Abstraction has 25402 states and 46943 transitions. [2022-11-16 12:42:45,409 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:42:45,410 INFO L428 stractBuchiCegarLoop]: Abstraction has 25402 states and 46943 transitions. [2022-11-16 12:42:45,410 INFO L335 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-11-16 12:42:45,410 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25402 states and 46943 transitions. [2022-11-16 12:42:45,557 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22431 [2022-11-16 12:42:45,557 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:45,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:45,564 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:45,564 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:45,565 INFO L748 eck$LassoCheckResult]: Stem: 629421#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 629422#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 629750#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 629751#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 630204#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 629406#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 628953#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 628954#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 630696#L104 assume !(0 == getOrigin_~person#1); 630153#L108 assume !(1 == getOrigin_~person#1); 628909#L112 assume !(2 == getOrigin_~person#1); 628910#L116 assume !(3 == getOrigin_~person#1); 630302#L120 assume !(4 == getOrigin_~person#1); 630072#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 630073#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 629992#L3009 assume !(0 == initPersonOnFloor_~floor#1); 629775#L3036 assume 1 == initPersonOnFloor_~floor#1; 629776#L3037 assume !(0 == initPersonOnFloor_~person#1); 630408#L3040 assume !(1 == initPersonOnFloor_~person#1); 629102#L3043 assume !(2 == initPersonOnFloor_~person#1); 629103#L3046 assume !(3 == initPersonOnFloor_~person#1); 630633#L3049 assume !(4 == initPersonOnFloor_~person#1); 628948#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 628949#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 630228#L2801 assume !(0 == callOnFloor_~floorID#1); 630563#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 629374#L2813-2 assume { :end_inline_callOnFloor } true; 629550#L3153 assume { :end_inline_initPersonOnFloor } true; 628737#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 628738#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 629622#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 630778#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 630676#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 630630#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 628919#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 628921#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 630783#L2073 assume !(0 != timeShift_~tmp___9~2#1); 629191#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 629192#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 628553#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 628554#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 629199#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 629226#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 629970#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 629898#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 629900#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 630780#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 629768#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 628637#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 628524#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 628525#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 630358#L3312-4 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 629925#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 629926#L1902-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 630147#L1908-5 assume { :end_inline_continueInDirection } true; 629950#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 629600#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 629601#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 629897#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 634933#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 634927#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 634906#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 634903#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 634900#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 634897#L890-2 [2022-11-16 12:42:45,566 INFO L750 eck$LassoCheckResult]: Loop: 634897#L890-2 assume !false; 634892#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 634881#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 634869#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 634867#L898 assume 1 != cleanup_~tmp___0~1#1; 634865#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 634863#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 634862#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 634847#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 634843#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 634841#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 634811#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 634799#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 634770#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 634750#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 634724#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 634725#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 634513#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 634514#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 650054#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 650053#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 650052#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 650051#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 650047#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 650046#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 650045#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 631366#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 631334#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 631331#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 631330#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 631329#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 631328#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 631327#L1526-2 assume ~currentFloorID~0 < 0; 631322#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 631289#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 631284#L2765-27 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 631268#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 631263#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 631261#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 630989#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 630987#L3312-6 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 630982#L1896-9 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 630977#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 630973#L1908-7 assume { :end_inline_continueInDirection } true; 630969#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 630966#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 630965#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 630963#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 630961#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 630958#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 630949#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 630948#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 630947#L890-2 assume !false; 630946#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 630945#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 630944#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 630943#L898 assume 1 != cleanup_~tmp___0~1#1; 630942#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 630937#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 630935#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 630933#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 630931#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 630930#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 630926#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 630921#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 630847#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 630828#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 630826#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 630824#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 630821#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 630819#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 630817#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 630815#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 630813#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 630811#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 630808#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 630806#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 630800#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 630798#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 630796#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 629656#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 629657#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 636916#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 634629#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 636894#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 636890#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 636838#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 636833#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 636832#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 636825#L1892-5 assume !(1 == ~currentHeading~0); 636823#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 634634#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 634627#L1908-11 assume { :end_inline_continueInDirection } true; 634944#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 634942#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 634940#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 634938#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 634916#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 634921#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 634919#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 634904#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 634901#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 634897#L890-2 [2022-11-16 12:42:45,566 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:45,566 INFO L85 PathProgramCache]: Analyzing trace with hash -1000498906, now seen corresponding path program 1 times [2022-11-16 12:42:45,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:45,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028235634] [2022-11-16 12:42:45,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:45,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:45,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:45,659 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:45,659 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:45,660 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028235634] [2022-11-16 12:42:45,660 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1028235634] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:45,660 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:45,660 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:45,660 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [67036497] [2022-11-16 12:42:45,660 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:45,661 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:45,661 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:45,661 INFO L85 PathProgramCache]: Analyzing trace with hash -1779295823, now seen corresponding path program 1 times [2022-11-16 12:42:45,661 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:45,661 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [148773825] [2022-11-16 12:42:45,662 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:45,662 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:45,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:45,757 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-16 12:42:45,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:45,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [148773825] [2022-11-16 12:42:45,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [148773825] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:45,758 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:45,758 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:45,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1173379386] [2022-11-16 12:42:45,759 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:45,759 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:45,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:45,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:45,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:45,760 INFO L87 Difference]: Start difference. First operand 25402 states and 46943 transitions. cyclomatic complexity: 21542 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:45,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:45,975 INFO L93 Difference]: Finished difference Result 25412 states and 46930 transitions. [2022-11-16 12:42:45,975 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 25412 states and 46930 transitions. [2022-11-16 12:42:46,066 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22441 [2022-11-16 12:42:46,130 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 25412 states to 25412 states and 46930 transitions. [2022-11-16 12:42:46,130 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 25412 [2022-11-16 12:42:46,146 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 25412 [2022-11-16 12:42:46,146 INFO L73 IsDeterministic]: Start isDeterministic. Operand 25412 states and 46930 transitions. [2022-11-16 12:42:46,159 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:46,159 INFO L218 hiAutomatonCegarLoop]: Abstraction has 25412 states and 46930 transitions. [2022-11-16 12:42:46,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25412 states and 46930 transitions. [2022-11-16 12:42:46,337 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25412 to 25402. [2022-11-16 12:42:46,355 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 25402 states, 25402 states have (on average 1.8469018187544288) internal successors, (46915), 25401 states have internal predecessors, (46915), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:46,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25402 states to 25402 states and 46915 transitions. [2022-11-16 12:42:46,677 INFO L240 hiAutomatonCegarLoop]: Abstraction has 25402 states and 46915 transitions. [2022-11-16 12:42:46,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:42:46,678 INFO L428 stractBuchiCegarLoop]: Abstraction has 25402 states and 46915 transitions. [2022-11-16 12:42:46,678 INFO L335 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-11-16 12:42:46,678 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25402 states and 46915 transitions. [2022-11-16 12:42:46,738 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22431 [2022-11-16 12:42:46,738 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:46,738 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:46,743 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:46,743 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:46,743 INFO L748 eck$LassoCheckResult]: Stem: 680249#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 680250#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 680580#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 680581#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 681018#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 680234#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 679787#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 679788#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 681493#L104 assume !(0 == getOrigin_~person#1); 680975#L108 assume !(1 == getOrigin_~person#1); 679743#L112 assume !(2 == getOrigin_~person#1); 679744#L116 assume !(3 == getOrigin_~person#1); 681118#L120 assume !(4 == getOrigin_~person#1); 680896#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 680897#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 680817#L3009 assume !(0 == initPersonOnFloor_~floor#1); 680604#L3036 assume 1 == initPersonOnFloor_~floor#1; 680605#L3037 assume !(0 == initPersonOnFloor_~person#1); 681221#L3040 assume !(1 == initPersonOnFloor_~person#1); 679933#L3043 assume !(2 == initPersonOnFloor_~person#1); 679934#L3046 assume !(3 == initPersonOnFloor_~person#1); 681436#L3049 assume !(4 == initPersonOnFloor_~person#1); 679782#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 679783#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 681041#L2801 assume !(0 == callOnFloor_~floorID#1); 681376#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 680202#L2813-2 assume { :end_inline_callOnFloor } true; 680378#L3153 assume { :end_inline_initPersonOnFloor } true; 679568#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 679569#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 680452#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 681570#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 681472#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 681433#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 679753#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 679755#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 681581#L2073 assume !(0 != timeShift_~tmp___9~2#1); 680020#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 680021#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 679385#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 679386#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 680028#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 680054#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 680795#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 680728#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 680730#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 681576#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 680600#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 679469#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 679359#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 679360#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 681176#L3312-4 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 680752#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 680753#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 680970#L1908-5 assume { :end_inline_continueInDirection } true; 680775#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 681009#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 685974#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 685972#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 685970#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 685960#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 685942#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 685940#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 685938#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 685937#L890-2 [2022-11-16 12:42:46,744 INFO L750 eck$LassoCheckResult]: Loop: 685937#L890-2 assume !false; 685936#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 685935#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 685934#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 685933#L898 assume 1 != cleanup_~tmp___0~1#1; 685932#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 685931#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 685930#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 685928#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 685926#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 685925#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 685917#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 685907#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 685901#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 685893#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 685892#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 685891#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 685890#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 685299#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 685293#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 685288#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 685286#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 685284#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 685276#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 685272#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 685267#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 685268#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 683007#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 683005#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 683003#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 683004#L1685-2 assume !(0 == ~currentFloorID~0); 683035#L1691-2 assume ~currentFloorID~0 > 0; 683033#L1692-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 683034#L2738-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 683058#L2765-32 stopRequestedInDirection_#t~ret59#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 682103#L1696-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 682081#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 682078#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 682059#L1892-3 assume !(1 == ~currentHeading~0); 681853#L1902-9 assume !(0 == ~currentFloorID~0); 681849#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 681794#L1908-7 assume { :end_inline_continueInDirection } true; 681785#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 681776#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 681772#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 681770#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 681771#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 681734#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 681714#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 681712#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 681710#L890-2 assume !false; 681708#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 681706#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 681704#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 681702#L898 assume 1 != cleanup_~tmp___0~1#1; 681700#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 681698#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 681696#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 681693#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 681689#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 681686#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 681677#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 681671#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 681641#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 681622#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 681620#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 681618#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 681615#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 681613#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 681611#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 681609#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 681607#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 681605#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 681602#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 681600#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 681596#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 681594#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 681592#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 680486#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 680487#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 686584#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 686444#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 686579#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 686481#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 686357#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 686331#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 686204#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 686002#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 685998#L1952-3 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 685994#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 685991#L3312-8 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 685985#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 685982#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 685979#L1908-9 assume { :end_inline_continueInDirection } true; 685978#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 685976#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 685975#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 685973#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 685952#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 685957#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 685955#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 685941#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 685939#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 685937#L890-2 [2022-11-16 12:42:46,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:46,744 INFO L85 PathProgramCache]: Analyzing trace with hash -299434328, now seen corresponding path program 1 times [2022-11-16 12:42:46,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:46,744 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [224256972] [2022-11-16 12:42:46,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:46,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:46,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:46,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:46,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:46,868 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [224256972] [2022-11-16 12:42:46,868 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [224256972] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:46,868 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:46,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:46,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [12531963] [2022-11-16 12:42:46,868 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:46,869 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:46,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:46,869 INFO L85 PathProgramCache]: Analyzing trace with hash -722933016, now seen corresponding path program 1 times [2022-11-16 12:42:46,869 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:46,869 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [439660659] [2022-11-16 12:42:46,869 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:46,870 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:46,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:46,960 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-11-16 12:42:46,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:46,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [439660659] [2022-11-16 12:42:46,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [439660659] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:46,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:46,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:46,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [975139] [2022-11-16 12:42:46,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:46,961 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:46,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:46,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:42:46,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:42:46,962 INFO L87 Difference]: Start difference. First operand 25402 states and 46915 transitions. cyclomatic complexity: 21514 Second operand has 6 states, 6 states have (on average 10.666666666666666) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:48,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:48,201 INFO L93 Difference]: Finished difference Result 69094 states and 127339 transitions. [2022-11-16 12:42:48,202 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69094 states and 127339 transitions. [2022-11-16 12:42:48,802 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 66118 [2022-11-16 12:42:49,068 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69094 states to 69079 states and 127324 transitions. [2022-11-16 12:42:49,068 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69079 [2022-11-16 12:42:49,113 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69079 [2022-11-16 12:42:49,113 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69079 states and 127324 transitions. [2022-11-16 12:42:49,153 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:49,153 INFO L218 hiAutomatonCegarLoop]: Abstraction has 69079 states and 127324 transitions. [2022-11-16 12:42:49,190 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69079 states and 127324 transitions. [2022-11-16 12:42:49,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69079 to 47022. [2022-11-16 12:42:49,703 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 47022 states, 47022 states have (on average 1.8422440559737996) internal successors, (86626), 47021 states have internal predecessors, (86626), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:50,245 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47022 states to 47022 states and 86626 transitions. [2022-11-16 12:42:50,246 INFO L240 hiAutomatonCegarLoop]: Abstraction has 47022 states and 86626 transitions. [2022-11-16 12:42:50,246 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-16 12:42:50,246 INFO L428 stractBuchiCegarLoop]: Abstraction has 47022 states and 86626 transitions. [2022-11-16 12:42:50,247 INFO L335 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-11-16 12:42:50,247 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47022 states and 86626 transitions. [2022-11-16 12:42:50,345 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 44066 [2022-11-16 12:42:50,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:50,346 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:50,353 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:50,353 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:50,354 INFO L748 eck$LassoCheckResult]: Stem: 774778#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 774779#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 775105#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 775106#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 775568#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 774761#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 774308#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 774309#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 776060#L104 assume !(0 == getOrigin_~person#1); 775520#L108 assume !(1 == getOrigin_~person#1); 774265#L112 assume !(2 == getOrigin_~person#1); 774266#L116 assume !(3 == getOrigin_~person#1); 775666#L120 assume !(4 == getOrigin_~person#1); 775438#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 775439#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 775355#L3009 assume !(0 == initPersonOnFloor_~floor#1); 775130#L3036 assume 1 == initPersonOnFloor_~floor#1; 775131#L3037 assume !(0 == initPersonOnFloor_~person#1); 775773#L3040 assume !(1 == initPersonOnFloor_~person#1); 774457#L3043 assume !(2 == initPersonOnFloor_~person#1); 774458#L3046 assume !(3 == initPersonOnFloor_~person#1); 776000#L3049 assume !(4 == initPersonOnFloor_~person#1); 774303#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 774304#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 775591#L2801 assume !(0 == callOnFloor_~floorID#1); 775937#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 774731#L2813-2 assume { :end_inline_callOnFloor } true; 774906#L3153 assume { :end_inline_initPersonOnFloor } true; 774091#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 774092#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 774974#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 776140#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 776039#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 775998#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 774275#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 774277#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 776149#L2073 assume !(0 != timeShift_~tmp___9~2#1); 774546#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 774547#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 773908#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 773909#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 774555#L1520 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 774581#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 775334#L2172 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 775259#L1947 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 775261#L1952 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 776151#L1516-1 assume !(1 == stopRequestedInDirection_~dir#1); 775123#L1685-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 773989#L1838-1 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 773880#L2181 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 773881#L1892-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 775724#L3312-4 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 775286#L1896-6 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 775287#L1902-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 775514#L1908-5 assume { :end_inline_continueInDirection } true; 775313#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 774952#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 774953#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 775258#L268 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 780095#L283 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 780088#L298 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 780086#L313 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 780083#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 780081#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 780082#L890-2 [2022-11-16 12:42:50,354 INFO L750 eck$LassoCheckResult]: Loop: 780082#L890-2 assume !false; 780488#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 780487#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 780486#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 780485#L898 assume 1 != cleanup_~tmp___0~1#1; 780484#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 780483#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 780482#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 780480#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 780478#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 780477#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 780473#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 780472#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 780034#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 780027#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 780022#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 780023#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 780019#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 780018#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 780014#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 780013#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 780012#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 779945#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 779941#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 779940#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 779899#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 779875#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 779872#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 779870#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 779866#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 779865#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 779825#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 779826#L1526-2 assume ~currentFloorID~0 < 0; 779843#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 779842#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 779828#L2765-27 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 779809#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 779804#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 779801#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 779561#L1892-3 assume !(1 == ~currentHeading~0); 779550#L1902-9 assume !(0 == ~currentFloorID~0); 779419#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 779019#L1908-7 assume { :end_inline_continueInDirection } true; 776822#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 776821#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 776820#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 776818#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 776814#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 776808#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 776468#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 776408#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 776395#L890-2 assume !false; 776388#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 776385#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 776372#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 776369#L898 assume 1 != cleanup_~tmp___0~1#1; 776363#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 776361#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 776354#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 776328#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 776325#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 776324#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 776320#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 776310#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 776266#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 776247#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 776245#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 776243#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 776240#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 776238#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 776236#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 776234#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 776232#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 776230#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 776227#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 776225#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 776222#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 776220#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 776218#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 775011#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 775012#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 803393#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 803390#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 803388#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 803381#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 803329#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 803324#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 803323#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 803255#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 803258#L1952-3 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 803256#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 803253#L3312-8 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 803251#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 803249#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 798052#L1908-9 assume { :end_inline_continueInDirection } true; 780285#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 780284#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 780282#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 780283#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 780502#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 780495#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 780493#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 780490#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 780489#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 780082#L890-2 [2022-11-16 12:42:50,355 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:50,355 INFO L85 PathProgramCache]: Analyzing trace with hash 190692970, now seen corresponding path program 1 times [2022-11-16 12:42:50,355 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:50,355 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [805320415] [2022-11-16 12:42:50,355 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:50,355 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:50,377 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:50,494 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:50,494 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:50,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [805320415] [2022-11-16 12:42:50,495 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [805320415] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:50,495 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:50,495 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-16 12:42:50,495 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [150528440] [2022-11-16 12:42:50,495 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:50,496 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:50,496 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:50,496 INFO L85 PathProgramCache]: Analyzing trace with hash 1393492334, now seen corresponding path program 1 times [2022-11-16 12:42:50,496 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:50,496 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2114635197] [2022-11-16 12:42:50,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:50,497 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:50,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:50,616 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-16 12:42:50,616 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:50,616 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2114635197] [2022-11-16 12:42:50,616 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2114635197] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:50,617 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:50,617 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:50,617 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [839382306] [2022-11-16 12:42:50,617 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:50,617 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:50,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:50,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:50,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:50,618 INFO L87 Difference]: Start difference. First operand 47022 states and 86626 transitions. cyclomatic complexity: 39605 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:51,600 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:51,600 INFO L93 Difference]: Finished difference Result 109154 states and 201606 transitions. [2022-11-16 12:42:51,600 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109154 states and 201606 transitions. [2022-11-16 12:42:52,473 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 106006 [2022-11-16 12:42:52,821 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109154 states to 109154 states and 201606 transitions. [2022-11-16 12:42:52,821 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109154 [2022-11-16 12:42:52,897 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109154 [2022-11-16 12:42:52,897 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109154 states and 201606 transitions. [2022-11-16 12:42:52,952 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:52,952 INFO L218 hiAutomatonCegarLoop]: Abstraction has 109154 states and 201606 transitions. [2022-11-16 12:42:53,013 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109154 states and 201606 transitions. [2022-11-16 12:42:53,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109154 to 50314. [2022-11-16 12:42:53,920 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50314 states, 50314 states have (on average 1.8435624279524585) internal successors, (92757), 50313 states have internal predecessors, (92757), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:54,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50314 states to 50314 states and 92757 transitions. [2022-11-16 12:42:54,006 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50314 states and 92757 transitions. [2022-11-16 12:42:54,006 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-16 12:42:54,006 INFO L428 stractBuchiCegarLoop]: Abstraction has 50314 states and 92757 transitions. [2022-11-16 12:42:54,007 INFO L335 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-11-16 12:42:54,007 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50314 states and 92757 transitions. [2022-11-16 12:42:54,136 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 47292 [2022-11-16 12:42:54,137 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:54,137 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:54,146 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:54,146 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:54,146 INFO L748 eck$LassoCheckResult]: Stem: 930968#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 930969#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 931298#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 931299#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 931758#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 930950#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 930499#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 930500#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 932255#L104 assume !(0 == getOrigin_~person#1); 931710#L108 assume !(1 == getOrigin_~person#1); 930456#L112 assume !(2 == getOrigin_~person#1); 930457#L116 assume !(3 == getOrigin_~person#1); 931861#L120 assume !(4 == getOrigin_~person#1); 931621#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 931622#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 931542#L3009 assume !(0 == initPersonOnFloor_~floor#1); 931324#L3036 assume 1 == initPersonOnFloor_~floor#1; 931325#L3037 assume !(0 == initPersonOnFloor_~person#1); 931971#L3040 assume !(1 == initPersonOnFloor_~person#1); 930644#L3043 assume !(2 == initPersonOnFloor_~person#1); 930645#L3046 assume !(3 == initPersonOnFloor_~person#1); 932186#L3049 assume !(4 == initPersonOnFloor_~person#1); 930494#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 930495#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 931782#L2801 assume !(0 == callOnFloor_~floorID#1); 932128#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 930919#L2813-2 assume { :end_inline_callOnFloor } true; 931099#L3153 assume { :end_inline_initPersonOnFloor } true; 930281#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 930282#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 931167#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 932338#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 932236#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 932184#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 930466#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 930468#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 932348#L2073 assume !(0 != timeShift_~tmp___9~2#1); 930734#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 930735#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 930103#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 930104#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 930743#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 931266#L1526 assume !(~currentFloorID~0 < 0); 932143#L1541 assume !(~currentFloorID~0 < 0); 931143#L1554 assume ~currentFloorID~0 < 1; 931144#L1556 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 931139#L1570 assume ~currentFloorID~0 < 1; 930880#L1572 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 930882#L1573 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 930769#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 932347#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 930225#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 930226#L3312-1 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 930813#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 930814#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 931520#L1908-1 assume { :end_inline_continueInDirection } true; 931497#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 931147#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 931148#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 930403#L268 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 930404#L283 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 931268#L298 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 931270#L313 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 931650#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 931651#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 968014#L890-2 [2022-11-16 12:42:54,147 INFO L750 eck$LassoCheckResult]: Loop: 968014#L890-2 assume !false; 968013#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 968012#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 968011#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 968010#L898 assume 1 != cleanup_~tmp___0~1#1; 968009#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 968008#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 968007#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 968006#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 968004#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 968003#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 967995#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 967985#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 967979#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 967971#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 967970#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 967969#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 967968#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 967967#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 967963#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 967962#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 967961#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 961417#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 961412#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 961409#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 934510#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 933376#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 933373#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 933371#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 933368#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 933367#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 933366#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 933365#L1526-2 assume ~currentFloorID~0 < 0; 933358#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 933359#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 933370#L2765-27 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 933355#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 933356#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 934780#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 934776#L1892-3 assume !(1 == ~currentHeading~0); 934672#L1902-9 assume !(0 == ~currentFloorID~0); 934665#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 934662#L1908-7 assume { :end_inline_continueInDirection } true; 934660#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 934659#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 934657#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 934656#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 934655#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 934652#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 934504#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 934500#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 934496#L890-2 assume !false; 934486#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 934479#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 934475#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 934470#L898 assume 1 != cleanup_~tmp___0~1#1; 934464#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 933913#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 933616#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 933617#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 935091#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 935089#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 935080#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 935065#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 935038#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 935019#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 935017#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 935015#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 935012#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 935010#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 935008#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 935006#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 935004#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 935002#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 934999#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 934997#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 934988#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 934986#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 932389#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 931203#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 931204#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 956756#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 956755#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 956754#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 956752#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 952765#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 955288#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 930333#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 930335#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 931035#L1952-3 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 930253#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 930254#L3312-8 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 930275#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 930101#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 930102#L1908-9 assume { :end_inline_continueInDirection } true; 968037#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 968036#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 968035#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 968034#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 968033#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 968026#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 968024#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 968021#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 968015#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 968014#L890-2 [2022-11-16 12:42:54,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:54,147 INFO L85 PathProgramCache]: Analyzing trace with hash -1384011050, now seen corresponding path program 1 times [2022-11-16 12:42:54,147 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:54,148 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1351749931] [2022-11-16 12:42:54,148 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:54,148 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:54,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:54,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:54,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:54,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1351749931] [2022-11-16 12:42:54,238 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1351749931] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:54,238 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:54,238 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:42:54,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349388798] [2022-11-16 12:42:54,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:54,238 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:54,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:54,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1393492334, now seen corresponding path program 2 times [2022-11-16 12:42:54,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:54,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1041863300] [2022-11-16 12:42:54,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:54,240 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:54,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:54,329 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-16 12:42:54,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:54,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1041863300] [2022-11-16 12:42:54,329 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1041863300] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:54,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:54,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:54,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2142348413] [2022-11-16 12:42:54,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:54,330 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:54,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:54,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-16 12:42:54,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-16 12:42:54,331 INFO L87 Difference]: Start difference. First operand 50314 states and 92757 transitions. cyclomatic complexity: 42445 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:55,102 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:55,115 INFO L93 Difference]: Finished difference Result 50314 states and 92505 transitions. [2022-11-16 12:42:55,115 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50314 states and 92505 transitions. [2022-11-16 12:42:55,348 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 47292 [2022-11-16 12:42:55,501 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50314 states to 50314 states and 92505 transitions. [2022-11-16 12:42:55,501 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50314 [2022-11-16 12:42:55,538 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50314 [2022-11-16 12:42:55,538 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50314 states and 92505 transitions. [2022-11-16 12:42:55,567 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:55,568 INFO L218 hiAutomatonCegarLoop]: Abstraction has 50314 states and 92505 transitions. [2022-11-16 12:42:55,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50314 states and 92505 transitions. [2022-11-16 12:42:56,064 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50314 to 50314. [2022-11-16 12:42:56,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50314 states, 50314 states have (on average 1.838553881623405) internal successors, (92505), 50313 states have internal predecessors, (92505), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:56,217 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50314 states to 50314 states and 92505 transitions. [2022-11-16 12:42:56,217 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50314 states and 92505 transitions. [2022-11-16 12:42:56,218 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-16 12:42:56,218 INFO L428 stractBuchiCegarLoop]: Abstraction has 50314 states and 92505 transitions. [2022-11-16 12:42:56,218 INFO L335 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-11-16 12:42:56,219 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50314 states and 92505 transitions. [2022-11-16 12:42:56,384 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 47292 [2022-11-16 12:42:56,384 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:56,384 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:56,397 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:56,397 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:56,398 INFO L748 eck$LassoCheckResult]: Stem: 1031612#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1031613#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1031939#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1031940#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1032395#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1031595#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1031148#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1031149#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1032883#L104 assume !(0 == getOrigin_~person#1); 1032348#L108 assume !(1 == getOrigin_~person#1); 1031104#L112 assume !(2 == getOrigin_~person#1); 1031105#L116 assume !(3 == getOrigin_~person#1); 1032491#L120 assume !(4 == getOrigin_~person#1); 1032259#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1032260#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1032181#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1031965#L3036 assume 1 == initPersonOnFloor_~floor#1; 1031966#L3037 assume !(0 == initPersonOnFloor_~person#1); 1032596#L3040 assume !(1 == initPersonOnFloor_~person#1); 1031292#L3043 assume !(2 == initPersonOnFloor_~person#1); 1031293#L3046 assume !(3 == initPersonOnFloor_~person#1); 1032822#L3049 assume !(4 == initPersonOnFloor_~person#1); 1031143#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1031144#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1032418#L2801 assume !(0 == callOnFloor_~floorID#1); 1032759#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1031565#L2813-2 assume { :end_inline_callOnFloor } true; 1031740#L3153 assume { :end_inline_initPersonOnFloor } true; 1030930#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1030931#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1031806#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1032956#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1032864#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1032820#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1031114#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1031116#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1032966#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1031382#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1031383#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1030750#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1030751#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1031391#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1031904#L1526 assume !(~currentFloorID~0 < 0); 1032776#L1541 assume !(~currentFloorID~0 < 0); 1031782#L1554 assume ~currentFloorID~0 < 1; 1031783#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1031891#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1032756#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1031818#L2765-2 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1031889#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031415#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1032965#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1030874#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1030875#L3312-1 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1031459#L1896 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1030915#L1902-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1030916#L1908-1 assume { :end_inline_continueInDirection } true; 1032138#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1031786#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1031787#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1032087#L268 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046935#L283 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046928#L298 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046926#L313 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046922#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1046594#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1046592#L890-2 [2022-11-16 12:42:56,399 INFO L750 eck$LassoCheckResult]: Loop: 1046592#L890-2 assume !false; 1046590#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1046558#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1046556#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1046552#L898 assume 1 != cleanup_~tmp___0~1#1; 1046550#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1046548#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1046538#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1046534#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1046530#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1046523#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1046516#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1046507#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1046489#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1046480#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1046478#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1046476#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1046467#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1036858#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1036645#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1036640#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1036641#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1046471#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1036542#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1036543#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1046387#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1036530#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1036528#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1036527#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1036524#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1036526#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1036620#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1036517#L1526-2 assume ~currentFloorID~0 < 0; 1036515#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1036514#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1036511#L2765-27 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 1036429#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1036425#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1036381#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1036375#L1892-3 assume !(1 == ~currentHeading~0); 1034834#L1902-9 assume !(0 == ~currentFloorID~0); 1034831#L1902-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1033523#L1908-7 assume { :end_inline_continueInDirection } true; 1033259#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1033207#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1033198#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1033194#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1033191#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1033170#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1033159#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1033156#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1033154#L890-2 assume !false; 1033147#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1033145#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1033143#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1033141#L898 assume 1 != cleanup_~tmp___0~1#1; 1033138#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1033134#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1033128#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1033115#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1033112#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1033111#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1033107#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1033097#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1033053#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1033034#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1033032#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1033030#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1033027#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1033025#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1033023#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1033021#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1033019#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1033017#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1033014#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1033012#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1033009#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1033007#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1033005#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1031843#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1031844#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1051233#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1051231#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1051232#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1051225#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1051185#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1051180#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1051179#L2181-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1047384#L1947-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1051178#L1952-3 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1051172#L1892-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1051171#L3312-8 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1051170#L1896-12 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1051169#L1902-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1047369#L1908-9 assume { :end_inline_continueInDirection } true; 1047368#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1047367#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1047365#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046654#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046647#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046603#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046601#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1046597#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1046595#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1046592#L890-2 [2022-11-16 12:42:56,400 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:56,400 INFO L85 PathProgramCache]: Analyzing trace with hash 1979415046, now seen corresponding path program 1 times [2022-11-16 12:42:56,400 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:56,400 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [920639540] [2022-11-16 12:42:56,401 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:56,401 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:56,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:56,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:56,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:56,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [920639540] [2022-11-16 12:42:56,978 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [920639540] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:56,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:56,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:56,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [722150949] [2022-11-16 12:42:56,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:56,979 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:56,980 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:56,980 INFO L85 PathProgramCache]: Analyzing trace with hash 1393492334, now seen corresponding path program 3 times [2022-11-16 12:42:56,980 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:56,980 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1542835384] [2022-11-16 12:42:56,981 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:56,981 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:56,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:57,083 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-11-16 12:42:57,084 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:57,084 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1542835384] [2022-11-16 12:42:57,084 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1542835384] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:57,084 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:57,084 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:57,085 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272115412] [2022-11-16 12:42:57,085 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:57,085 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:57,086 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:57,086 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:42:57,086 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:42:57,086 INFO L87 Difference]: Start difference. First operand 50314 states and 92505 transitions. cyclomatic complexity: 42193 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:58,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:42:58,378 INFO L93 Difference]: Finished difference Result 56556 states and 103692 transitions. [2022-11-16 12:42:58,378 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56556 states and 103692 transitions. [2022-11-16 12:42:58,605 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 53478 [2022-11-16 12:42:58,757 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56556 states to 56556 states and 103692 transitions. [2022-11-16 12:42:58,757 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56556 [2022-11-16 12:42:58,796 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56556 [2022-11-16 12:42:58,796 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56556 states and 103692 transitions. [2022-11-16 12:42:58,825 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:42:58,826 INFO L218 hiAutomatonCegarLoop]: Abstraction has 56556 states and 103692 transitions. [2022-11-16 12:42:58,857 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56556 states and 103692 transitions. [2022-11-16 12:42:59,543 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56556 to 29384. [2022-11-16 12:42:59,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29384 states, 29384 states have (on average 1.8372924040294039) internal successors, (53987), 29383 states have internal predecessors, (53987), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:42:59,612 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29384 states to 29384 states and 53987 transitions. [2022-11-16 12:42:59,612 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29384 states and 53987 transitions. [2022-11-16 12:42:59,612 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-11-16 12:42:59,613 INFO L428 stractBuchiCegarLoop]: Abstraction has 29384 states and 53987 transitions. [2022-11-16 12:42:59,613 INFO L335 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2022-11-16 12:42:59,613 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29384 states and 53987 transitions. [2022-11-16 12:42:59,687 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 26386 [2022-11-16 12:42:59,688 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:42:59,688 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:42:59,696 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:59,696 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:42:59,696 INFO L748 eck$LassoCheckResult]: Stem: 1138514#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1138515#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1138846#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1138847#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1139303#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1138497#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1138051#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1138052#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1139802#L104 assume !(0 == getOrigin_~person#1); 1139256#L108 assume !(1 == getOrigin_~person#1); 1138007#L112 assume !(2 == getOrigin_~person#1); 1138008#L116 assume !(3 == getOrigin_~person#1); 1139405#L120 assume !(4 == getOrigin_~person#1); 1139169#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1139170#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1139092#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1138870#L3036 assume 1 == initPersonOnFloor_~floor#1; 1138871#L3037 assume !(0 == initPersonOnFloor_~person#1); 1139509#L3040 assume !(1 == initPersonOnFloor_~person#1); 1138195#L3043 assume !(2 == initPersonOnFloor_~person#1); 1138196#L3046 assume !(3 == initPersonOnFloor_~person#1); 1139738#L3049 assume !(4 == initPersonOnFloor_~person#1); 1138046#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1138047#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1139326#L2801 assume !(0 == callOnFloor_~floorID#1); 1139674#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1138467#L2813-2 assume { :end_inline_callOnFloor } true; 1138643#L3153 assume { :end_inline_initPersonOnFloor } true; 1137830#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1137831#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1138712#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1139888#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1139782#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1139736#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1138017#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1138019#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1139898#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1138284#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1138285#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1137650#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1137651#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1138293#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1138811#L1526 assume !(~currentFloorID~0 < 0); 1139688#L1541 assume !(~currentFloorID~0 < 0); 1138688#L1554 assume ~currentFloorID~0 < 1; 1138689#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1138795#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1139670#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1138724#L2765-2 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1138793#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1138318#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1139897#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1137772#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1137773#L3312-1 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1138362#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1137815#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1137816#L1908-1 assume { :end_inline_continueInDirection } true; 1139051#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1139907#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1139906#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1139905#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1138556#L270 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1138557#L1321-1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 1137804#L274 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1137805#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1155023#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1155021#L890-2 [2022-11-16 12:42:59,697 INFO L750 eck$LassoCheckResult]: Loop: 1155021#L890-2 assume !false; 1155020#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1155019#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1155018#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1155017#L898 assume 1 != cleanup_~tmp___0~1#1; 1155016#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1155015#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1155014#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1155012#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1155006#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1155007#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1160186#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1160176#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1160170#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1160162#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1160161#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1160160#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1160159#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1160152#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1160144#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1160142#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1159330#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1154974#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1154970#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1154968#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1154626#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1153188#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1153092#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1153086#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1143621#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1143616#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1143614#L1520-2 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1143613#L1526-2 assume ~currentFloorID~0 < 0; 1143612#L1527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1143608#L2738-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1143603#L2765-27 stopRequestedInDirection_#t~ret54#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret54#1;havoc stopRequestedInDirection_#t~ret54#1; 1143576#L1531-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1143569#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1143557#L2172-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1143556#L1892-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1143555#L3312-6 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1143554#L1896-9 assume !(0 != continueInDirection_~tmp~16#1); 1143553#L1902-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1143551#L1908-7 assume { :end_inline_continueInDirection } true; 1143549#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1143548#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1143546#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1143547#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1143531#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1143523#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1143513#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1143511#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1143509#L890-2 assume !false; 1143507#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1143505#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1143503#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1143501#L898 assume 1 != cleanup_~tmp___0~1#1; 1143499#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1143497#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1143494#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1143492#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1143486#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1143485#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1143474#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1143460#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1143442#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1143423#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1143421#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1143419#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1143416#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1143414#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1143412#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1143410#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1143408#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1143406#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1143403#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1143401#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1143388#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1143381#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1143378#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1143377#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1143375#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1143374#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1143373#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1143371#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1143362#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1143363#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1154526#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1154508#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1154507#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1154503#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1137931#L3312-9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1137732#L1896-15 assume !(0 != continueInDirection_~tmp~16#1); 1137733#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1138212#L1908-11 assume { :end_inline_continueInDirection } true; 1138213#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1158048#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1158047#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1158046#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1155035#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1155040#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1155038#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1155033#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1155022#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1155021#L890-2 [2022-11-16 12:42:59,698 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:59,698 INFO L85 PathProgramCache]: Analyzing trace with hash 1046388608, now seen corresponding path program 1 times [2022-11-16 12:42:59,699 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:59,699 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1909652055] [2022-11-16 12:42:59,699 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:59,699 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:59,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:59,745 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:42:59,745 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:59,745 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1909652055] [2022-11-16 12:42:59,745 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1909652055] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:59,746 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:59,746 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-16 12:42:59,746 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1941077250] [2022-11-16 12:42:59,746 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:59,746 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:42:59,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:42:59,747 INFO L85 PathProgramCache]: Analyzing trace with hash 1030356645, now seen corresponding path program 1 times [2022-11-16 12:42:59,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:42:59,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [490983943] [2022-11-16 12:42:59,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:42:59,748 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:42:59,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:42:59,836 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-11-16 12:42:59,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:42:59,837 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [490983943] [2022-11-16 12:42:59,837 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [490983943] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:42:59,837 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:42:59,837 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:42:59,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920465400] [2022-11-16 12:42:59,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:42:59,838 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:42:59,838 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:42:59,838 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-16 12:42:59,839 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-16 12:42:59,839 INFO L87 Difference]: Start difference. First operand 29384 states and 53987 transitions. cyclomatic complexity: 24605 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:43:00,082 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:43:00,083 INFO L93 Difference]: Finished difference Result 58110 states and 106822 transitions. [2022-11-16 12:43:00,083 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58110 states and 106822 transitions. [2022-11-16 12:43:00,294 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 52704 [2022-11-16 12:43:00,919 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58110 states to 58110 states and 106822 transitions. [2022-11-16 12:43:00,920 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 58110 [2022-11-16 12:43:00,969 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 58110 [2022-11-16 12:43:00,969 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58110 states and 106822 transitions. [2022-11-16 12:43:01,008 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:43:01,009 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58110 states and 106822 transitions. [2022-11-16 12:43:01,039 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58110 states and 106822 transitions. [2022-11-16 12:43:01,425 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58110 to 58110. [2022-11-16 12:43:01,466 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58110 states, 58110 states have (on average 1.838272242299088) internal successors, (106822), 58109 states have internal predecessors, (106822), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:43:01,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58110 states to 58110 states and 106822 transitions. [2022-11-16 12:43:01,571 INFO L240 hiAutomatonCegarLoop]: Abstraction has 58110 states and 106822 transitions. [2022-11-16 12:43:01,572 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-16 12:43:01,572 INFO L428 stractBuchiCegarLoop]: Abstraction has 58110 states and 106822 transitions. [2022-11-16 12:43:01,572 INFO L335 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2022-11-16 12:43:01,572 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58110 states and 106822 transitions. [2022-11-16 12:43:01,726 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 52704 [2022-11-16 12:43:01,726 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:43:01,726 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:43:01,740 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:43:01,740 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:43:01,740 INFO L748 eck$LassoCheckResult]: Stem: 1226021#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1226022#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1226355#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1226356#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1226809#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1226005#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1225554#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1225555#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1227296#L104 assume !(0 == getOrigin_~person#1); 1226760#L108 assume !(1 == getOrigin_~person#1); 1225510#L112 assume !(2 == getOrigin_~person#1); 1225511#L116 assume !(3 == getOrigin_~person#1); 1226905#L120 assume !(4 == getOrigin_~person#1); 1226682#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1226683#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1226598#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1226380#L3036 assume 1 == initPersonOnFloor_~floor#1; 1226381#L3037 assume !(0 == initPersonOnFloor_~person#1); 1227015#L3040 assume !(1 == initPersonOnFloor_~person#1); 1225699#L3043 assume !(2 == initPersonOnFloor_~person#1); 1225700#L3046 assume !(3 == initPersonOnFloor_~person#1); 1227235#L3049 assume !(4 == initPersonOnFloor_~person#1); 1225549#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1225550#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1226835#L2801 assume !(0 == callOnFloor_~floorID#1); 1227173#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1225972#L2813-2 assume { :end_inline_callOnFloor } true; 1227390#L3153 assume { :end_inline_initPersonOnFloor } true; 1227389#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1227388#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1227386#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1227383#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1227274#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1227232#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1225520#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1225522#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1227381#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1225791#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1225792#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1225156#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1225157#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1225799#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1226322#L1526 assume !(~currentFloorID~0 < 0); 1227189#L1541 assume !(~currentFloorID~0 < 0); 1226197#L1554 assume ~currentFloorID~0 < 1; 1226198#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1226307#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1227170#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1226234#L2765-2 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1226306#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1225825#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1227380#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1225279#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1225280#L3312-1 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1225869#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1225318#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1225319#L1908-1 assume { :end_inline_continueInDirection } true; 1226555#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1227387#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1227385#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1227384#L268 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1226064#L283 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246862#L298 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246860#L313 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246854#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1246834#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1246832#L890-2 [2022-11-16 12:43:01,741 INFO L750 eck$LassoCheckResult]: Loop: 1246832#L890-2 assume !false; 1246831#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1246830#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1246829#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1246828#L898 assume 1 != cleanup_~tmp___0~1#1; 1246827#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1246826#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1246825#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1246819#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1246816#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1246815#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1246807#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1246805#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1246796#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1246757#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1240256#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1228878#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1228805#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1228806#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1261634#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1261633#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1228769#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1228758#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1228747#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1228740#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1228734#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1228735#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1228691#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1228688#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1228685#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1228684#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1228682#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1228333#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1228332#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1228329#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1228327#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1228317#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1228316#L3312-7 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1228192#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1228184#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1228182#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1228178#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1228172#L3312-9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1228165#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1228159#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1228156#L1908-11 assume { :end_inline_continueInDirection } true; 1228153#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1228152#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1228150#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1228151#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1228118#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1228119#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1227545#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1227546#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1227539#L890-2 assume !false; 1227540#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1227533#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1227534#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1227527#L898 assume 1 != cleanup_~tmp___0~1#1; 1227528#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1227522#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1227523#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1227512#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1227514#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1227506#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1227507#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1227476#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1227477#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1227433#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1227434#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1227427#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1227428#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1227421#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1227419#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1227417#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1227415#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1227413#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1227410#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1227408#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1227405#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1227403#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1227401#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1226260#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1226261#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1251975#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1251972#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1251970#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1251967#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1246878#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1246872#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1246869#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1228982#L1892-5 assume !(1 == ~currentHeading~0); 1246865#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1228958#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1246857#L1908-11 assume { :end_inline_continueInDirection } true; 1246853#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1246852#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1246851#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246850#L268-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1235036#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246842#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1246840#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1235030#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1246835#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1246832#L890-2 [2022-11-16 12:43:01,742 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:43:01,742 INFO L85 PathProgramCache]: Analyzing trace with hash 1536515906, now seen corresponding path program 1 times [2022-11-16 12:43:01,742 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:43:01,742 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625213412] [2022-11-16 12:43:01,742 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:43:01,742 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:43:01,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:43:01,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-16 12:43:01,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:43:01,891 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625213412] [2022-11-16 12:43:01,891 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625213412] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:43:01,891 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:43:01,891 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-16 12:43:01,891 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1995792120] [2022-11-16 12:43:01,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:43:01,892 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-16 12:43:01,892 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:43:01,892 INFO L85 PathProgramCache]: Analyzing trace with hash -1168207584, now seen corresponding path program 1 times [2022-11-16 12:43:01,892 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:43:01,893 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [177017948] [2022-11-16 12:43:01,893 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:43:01,893 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:43:01,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:43:02,002 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-16 12:43:02,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:43:02,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [177017948] [2022-11-16 12:43:02,003 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [177017948] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:43:02,003 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:43:02,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:43:02,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [800171925] [2022-11-16 12:43:02,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:43:02,005 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:43:02,005 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:43:02,005 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-16 12:43:02,005 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-16 12:43:02,005 INFO L87 Difference]: Start difference. First operand 58110 states and 106822 transitions. cyclomatic complexity: 48715 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:43:04,135 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-16 12:43:04,135 INFO L93 Difference]: Finished difference Result 167747 states and 307399 transitions. [2022-11-16 12:43:04,135 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 167747 states and 307399 transitions. [2022-11-16 12:43:05,566 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 162098 [2022-11-16 12:43:06,009 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 167747 states to 167603 states and 307223 transitions. [2022-11-16 12:43:06,010 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 167603 [2022-11-16 12:43:06,131 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 167603 [2022-11-16 12:43:06,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 167603 states and 307223 transitions. [2022-11-16 12:43:06,250 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-16 12:43:06,250 INFO L218 hiAutomatonCegarLoop]: Abstraction has 167603 states and 307223 transitions. [2022-11-16 12:43:06,334 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 167603 states and 307223 transitions. [2022-11-16 12:43:07,677 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 167603 to 94837. [2022-11-16 12:43:07,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 94837 states, 94837 states have (on average 1.8302034016259476) internal successors, (173571), 94836 states have internal predecessors, (173571), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-16 12:43:07,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 94837 states to 94837 states and 173571 transitions. [2022-11-16 12:43:07,897 INFO L240 hiAutomatonCegarLoop]: Abstraction has 94837 states and 173571 transitions. [2022-11-16 12:43:07,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-11-16 12:43:07,898 INFO L428 stractBuchiCegarLoop]: Abstraction has 94837 states and 173571 transitions. [2022-11-16 12:43:07,898 INFO L335 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2022-11-16 12:43:07,898 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 94837 states and 173571 transitions. [2022-11-16 12:43:08,139 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 89334 [2022-11-16 12:43:08,140 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-16 12:43:08,140 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-16 12:43:08,159 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:43:08,159 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-16 12:43:08,159 INFO L748 eck$LassoCheckResult]: Stem: 1451902#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~floorButtons_spc2_0~0 := 0;~doorState~0 := 1;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_5~0 := 0;~persons_0~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~currentHeading~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~cleanupTimeShifts~0 := 12;~calls_1~0 := 0;~calls_0~0 := 0;~calls_4~0 := 0;~calls_3~0 := 0;~calls_2~0 := 0;~currentFloorID~0 := 0; 1451903#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret46#1, main_~retValue_acc~7#1, main_~tmp~12#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~12#1;assume { :begin_inline_select_helpers } true; 1452231#L2643 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1452232#L2636 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~22#1;havoc valid_product_~retValue_acc~22#1;valid_product_~retValue_acc~22#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~22#1; 1452684#L2651 main_#t~ret46#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~12#1 := main_#t~ret46#1;havoc main_#t~ret46#1; 1451887#L1088 assume 0 != main_~tmp~12#1;assume { :begin_inline_setup } true; 1451432#L1060 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1451433#L209 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret39#1, bigMacCall_~tmp~9#1;havoc bigMacCall_~tmp~9#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~1#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~1#1; 1453169#L104 assume !(0 == getOrigin_~person#1); 1452637#L108 assume !(1 == getOrigin_~person#1); 1451388#L112 assume !(2 == getOrigin_~person#1); 1451389#L116 assume !(3 == getOrigin_~person#1); 1452782#L120 assume !(4 == getOrigin_~person#1); 1452551#L124 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~1#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~1#1; 1452552#L129 bigMacCall_#t~ret39#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~9#1 := bigMacCall_#t~ret39#1;havoc bigMacCall_#t~ret39#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~9#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1452473#L3009 assume !(0 == initPersonOnFloor_~floor#1); 1452254#L3036 assume 1 == initPersonOnFloor_~floor#1; 1452255#L3037 assume !(0 == initPersonOnFloor_~person#1); 1452887#L3040 assume !(1 == initPersonOnFloor_~person#1); 1451579#L3043 assume !(2 == initPersonOnFloor_~person#1); 1451580#L3046 assume !(3 == initPersonOnFloor_~person#1); 1453108#L3049 assume !(4 == initPersonOnFloor_~person#1); 1451427#L3052 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1451428#L3117-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1452709#L2801 assume !(0 == callOnFloor_~floorID#1); 1453047#L2804 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1451854#L2813-2 assume { :end_inline_callOnFloor } true; 1453256#L3153 assume { :end_inline_initPersonOnFloor } true; 1453255#L860 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret40#1, cleanup_#t~ret41#1, cleanup_~i~0#1, cleanup_~tmp~10#1, cleanup_~tmp___0~1#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~10#1;havoc cleanup_~tmp___0~1#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1453254#L2738 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1453252#L2765 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1453249#L1925 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1453150#L1329 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1453105#L1350 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1451398#L1932 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1451400#L1937 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1453247#L2073 assume !(0 != timeShift_~tmp___9~2#1); 1451669#L2164 assume 1 == ~doorState~0;~doorState~0 := 0; 1451670#L2164-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1451038#L1516 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1451039#L3312 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1451677#L1520 assume !(0 != stopRequestedInDirection_~tmp~15#1); 1452196#L1526 assume !(~currentFloorID~0 < 0); 1453060#L1541 assume !(~currentFloorID~0 < 0); 1452072#L1554 assume ~currentFloorID~0 < 1; 1452073#L1556 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1452180#L2738-2 assume !(0 == isFloorCalling_~floorID#1); 1453045#L2742-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1452108#L2765-2 stopRequestedInDirection_#t~ret55#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret55#1;havoc stopRequestedInDirection_#t~ret55#1; 1452179#L1560 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~16#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1451703#L1838 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1453246#L2172 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1451160#L1892 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1451161#L3312-1 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1451747#L1896 assume !(0 != continueInDirection_~tmp~16#1); 1451198#L1902-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1451199#L1908-1 assume { :end_inline_continueInDirection } true; 1452431#L2181-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1453253#L1312 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1453251#L254 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1453250#L268 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1451944#L270 assume !(0 != ~floorButtons_spc2_1~0); 1451945#L283 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1453257#L298 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1451981#L313 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1451982#L314 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1452471#L2196 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1452472#L890-2 [2022-11-16 12:43:08,160 INFO L750 eck$LassoCheckResult]: Loop: 1452472#L890-2 assume !false; 1471632#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1471626#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1471627#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1471621#L898 assume 1 != cleanup_~tmp___0~1#1; 1471622#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1471616#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1471617#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1471610#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1471607#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1471605#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1471598#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1471599#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1471548#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1471541#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1471510#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1471511#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1471503#L2738-26 assume !(0 == isFloorCalling_~floorID#1); 1471497#L2742-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1471488#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1471484#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1471481#L1329-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1471477#L1333-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1471468#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1471464#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1471460#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1471457#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1471454#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1471452#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1471451#L1516-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1471450#L3312-5 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1471448#L1520-2 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1471447#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1471446#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1471444#L1947-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~19#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1471445#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1471702#L1516-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1471436#L3312-7 stopRequestedInDirection_#t~ret53#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~15#1 := stopRequestedInDirection_#t~ret53#1;havoc stopRequestedInDirection_#t~ret53#1; 1471384#L1520-3 assume 0 != stopRequestedInDirection_~tmp~15#1;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1471378#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1471376#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1471375#L1892-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~25#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~25#1;isTopFloor_~retValue_acc~25#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~25#1; 1471286#L3312-9 continueInDirection_#t~ret64#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~16#1 := continueInDirection_#t~ret64#1;havoc continueInDirection_#t~ret64#1; 1471281#L1896-15 assume 0 != continueInDirection_~tmp~16#1;~currentHeading~0 := 0; 1471277#L1902-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1471268#L1908-11 assume { :end_inline_continueInDirection } true; 1471264#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1471262#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1471263#L254-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1487610#L255-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1487611#L1321-5 __utac_acc__Specification2_spec__3_#t~ret5#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1; 1453430#L259-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1453418#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1453415#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1453412#L890-2 assume !false; 1453409#L891 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1453406#L894 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1453403#L1179 cleanup_#t~ret40#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~1#1 := cleanup_#t~ret40#1;havoc cleanup_#t~ret40#1; 1453400#L898 assume 1 != cleanup_~tmp___0~1#1; 1453397#L898-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret52#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret47#1, anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1453394#L2738-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1453390#L2765-21 anyStopRequested_#t~ret47#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret47#1;havoc anyStopRequested_#t~ret47#1; 1453386#L1420 assume !(0 != anyStopRequested_~tmp___3~1#1); 1453380#L1424 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1453379#L2738-22 assume !(0 == isFloorCalling_~floorID#1); 1453365#L2742-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1453349#L2765-22 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1453350#L1431 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1487410#L1484 isIdle_#t~ret52#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret52#1;havoc isIdle_#t~ret52#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1487409#L1497 cleanup_#t~ret41#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~10#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 1487408#L910 assume !(0 != cleanup_~tmp~10#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret79#1, timeShift_#t~ret80#1, timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_~tmp~19#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~19#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_~retValue_acc~18#1, stopRequestedAtCurrentFloor_~tmp~17#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~18#1;havoc stopRequestedAtCurrentFloor_~tmp~17#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~23#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~23#1; 1453296#L2738-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~23#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~23#1; 1453297#L2765-26 stopRequestedAtCurrentFloor_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1488420#L1925-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1488419#L1329-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1488418#L1350-1 stopRequestedAtCurrentFloor_#t~ret66#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~17#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1488417#L1932-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~17#1);stopRequestedAtCurrentFloor_~retValue_acc~18#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~18#1; 1488411#L1937-1 timeShift_#t~ret79#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret79#1;havoc timeShift_#t~ret79#1; 1488409#L2073-2 assume !(0 != timeShift_~tmp___9~2#1); 1453263#L2164-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1453261#L2164-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1453259#L1516-2 assume !(1 == stopRequestedInDirection_~dir#1); 1452133#L1685-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1452134#L1838-2 timeShift_#t~ret86#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret86#1;havoc timeShift_#t~ret86#1; 1483265#L2172-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~19#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~19#1; 1483264#L1947-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~19#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~19#1; 1483263#L1952-2 timeShift_#t~ret87#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret53#1, stopRequestedInDirection_#t~ret54#1, stopRequestedInDirection_#t~ret55#1, stopRequestedInDirection_#t~ret56#1, stopRequestedInDirection_#t~ret57#1, stopRequestedInDirection_#t~ret58#1, stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_#t~ret62#1, stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~16#1, stopRequestedInDirection_~tmp~15#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~16#1;havoc stopRequestedInDirection_~tmp~15#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1483255#L1516-3 assume !(1 == stopRequestedInDirection_~dir#1); 1483199#L1685-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~16#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~16#1; 1483195#L1838-3 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1498813#L2181-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret64#1, continueInDirection_~dir#1, continueInDirection_~tmp~16#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~16#1;~currentHeading~0 := continueInDirection_~dir#1; 1475582#L1892-5 assume !(1 == ~currentHeading~0); 1475382#L1902-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1475380#L1902-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1475377#L1908-11 assume { :end_inline_continueInDirection } true; 1471678#L2181-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret4#1, __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1471679#L1312-1 __utac_acc__Specification2_spec__3_#t~ret4#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret4#1;havoc __utac_acc__Specification2_spec__3_#t~ret4#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1471660#L254-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1471661#L268-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1471652#L270-1 assume !(0 != ~floorButtons_spc2_1~0); 1471653#L283-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1471642#L298-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1471643#L313-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1471637#L314-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1471638#L2196-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1452472#L890-2 [2022-11-16 12:43:08,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:43:08,161 INFO L85 PathProgramCache]: Analyzing trace with hash -1605338435, now seen corresponding path program 1 times [2022-11-16 12:43:08,161 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:43:08,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [959434269] [2022-11-16 12:43:08,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:43:08,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:43:08,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 12:43:08,180 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-16 12:43:08,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-16 12:43:08,255 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-16 12:43:08,256 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-16 12:43:08,256 INFO L85 PathProgramCache]: Analyzing trace with hash 447584655, now seen corresponding path program 1 times [2022-11-16 12:43:08,256 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-16 12:43:08,256 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [500883844] [2022-11-16 12:43:08,257 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-16 12:43:08,257 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-16 12:43:08,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-16 12:43:08,368 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-11-16 12:43:08,369 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-16 12:43:08,369 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [500883844] [2022-11-16 12:43:08,369 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [500883844] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-16 12:43:08,369 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-16 12:43:08,369 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-16 12:43:08,370 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [748060717] [2022-11-16 12:43:08,370 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-16 12:43:08,370 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-16 12:43:08,370 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-16 12:43:08,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-16 12:43:08,371 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-16 12:43:08,371 INFO L87 Difference]: Start difference. First operand 94837 states and 173571 transitions. cyclomatic complexity: 78737 Second operand has 7 states, 7 states have (on average 12.714285714285714) internal successors, (89), 7 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)