./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 38b53e6a Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-38b53e6 [2022-11-25 18:35:01,348 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-11-25 18:35:01,350 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-11-25 18:35:01,368 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-11-25 18:35:01,369 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-11-25 18:35:01,370 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-11-25 18:35:01,371 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-11-25 18:35:01,373 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-11-25 18:35:01,375 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-11-25 18:35:01,376 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-11-25 18:35:01,377 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-11-25 18:35:01,378 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-11-25 18:35:01,379 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-11-25 18:35:01,380 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-11-25 18:35:01,381 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-11-25 18:35:01,383 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-11-25 18:35:01,384 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-11-25 18:35:01,385 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-11-25 18:35:01,386 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-11-25 18:35:01,388 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-11-25 18:35:01,390 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-11-25 18:35:01,391 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-11-25 18:35:01,392 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-11-25 18:35:01,393 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-11-25 18:35:01,397 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-11-25 18:35:01,397 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-11-25 18:35:01,398 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-11-25 18:35:01,399 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-11-25 18:35:01,399 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-11-25 18:35:01,401 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-11-25 18:35:01,401 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-11-25 18:35:01,402 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-11-25 18:35:01,403 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-11-25 18:35:01,404 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-11-25 18:35:01,405 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-11-25 18:35:01,405 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-11-25 18:35:01,406 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-11-25 18:35:01,406 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-11-25 18:35:01,407 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-11-25 18:35:01,408 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-11-25 18:35:01,409 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-11-25 18:35:01,411 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-11-25 18:35:01,459 INFO L113 SettingsManager]: Loading preferences was successful [2022-11-25 18:35:01,459 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-11-25 18:35:01,460 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-11-25 18:35:01,460 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-11-25 18:35:01,462 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-11-25 18:35:01,462 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-11-25 18:35:01,462 INFO L138 SettingsManager]: * Use SBE=true [2022-11-25 18:35:01,463 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-11-25 18:35:01,463 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-11-25 18:35:01,463 INFO L138 SettingsManager]: * Use old map elimination=false [2022-11-25 18:35:01,464 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-11-25 18:35:01,465 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-11-25 18:35:01,465 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-11-25 18:35:01,465 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-11-25 18:35:01,465 INFO L138 SettingsManager]: * sizeof long=4 [2022-11-25 18:35:01,466 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-11-25 18:35:01,466 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-11-25 18:35:01,466 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-11-25 18:35:01,466 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-11-25 18:35:01,466 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-11-25 18:35:01,467 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-11-25 18:35:01,467 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-11-25 18:35:01,467 INFO L138 SettingsManager]: * sizeof long double=12 [2022-11-25 18:35:01,467 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-11-25 18:35:01,468 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-11-25 18:35:01,468 INFO L138 SettingsManager]: * Use constant arrays=true [2022-11-25 18:35:01,469 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-11-25 18:35:01,469 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-11-25 18:35:01,469 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-11-25 18:35:01,470 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-11-25 18:35:01,470 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-11-25 18:35:01,471 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-11-25 18:35:01,472 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 8e809cb7921b0f8738511433928ba20d09f78a0d0fe23412d97e6052fa9e13ec [2022-11-25 18:35:01,799 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-11-25 18:35:01,848 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-11-25 18:35:01,850 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-11-25 18:35:01,851 INFO L271 PluginConnector]: Initializing CDTParser... [2022-11-25 18:35:01,853 INFO L275 PluginConnector]: CDTParser initialized [2022-11-25 18:35:01,855 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/../../sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2022-11-25 18:35:04,895 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-11-25 18:35:05,269 INFO L351 CDTParser]: Found 1 translation units. [2022-11-25 18:35:05,270 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c [2022-11-25 18:35:05,290 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/data/67ef83be8/fab8ba040b5144baa2c3f0a33e985d27/FLAG7c8b81dba [2022-11-25 18:35:05,334 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/data/67ef83be8/fab8ba040b5144baa2c3f0a33e985d27 [2022-11-25 18:35:05,339 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-11-25 18:35:05,341 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-11-25 18:35:05,345 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-11-25 18:35:05,345 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-11-25 18:35:05,349 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-11-25 18:35:05,350 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:35:05" (1/1) ... [2022-11-25 18:35:05,351 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@66f5e44d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:05, skipping insertion in model container [2022-11-25 18:35:05,351 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 25.11 06:35:05" (1/1) ... [2022-11-25 18:35:05,359 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-11-25 18:35:05,443 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-11-25 18:35:05,585 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2022-11-25 18:35:05,972 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:35:05,999 INFO L203 MainTranslator]: Completed pre-run [2022-11-25 18:35:06,012 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/sv-benchmarks/c/product-lines/elevator_spec2_product11.cil.c[1545,1558] [2022-11-25 18:35:06,110 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-11-25 18:35:06,146 INFO L208 MainTranslator]: Completed translation [2022-11-25 18:35:06,146 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06 WrapperNode [2022-11-25 18:35:06,146 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-11-25 18:35:06,147 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-11-25 18:35:06,148 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-11-25 18:35:06,148 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-11-25 18:35:06,155 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,206 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,408 INFO L138 Inliner]: procedures = 93, calls = 338, calls flagged for inlining = 191, calls inlined = 282, statements flattened = 8634 [2022-11-25 18:35:06,409 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-11-25 18:35:06,410 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-11-25 18:35:06,410 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-11-25 18:35:06,410 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-11-25 18:35:06,434 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,435 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,466 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,466 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,552 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,607 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,622 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,639 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,667 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-11-25 18:35:06,669 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-11-25 18:35:06,669 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-11-25 18:35:06,670 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-11-25 18:35:06,671 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (1/1) ... [2022-11-25 18:35:06,677 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:06,688 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:06,707 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:06,737 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-11-25 18:35:06,751 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-11-25 18:35:06,751 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-11-25 18:35:06,752 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-11-25 18:35:06,752 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-11-25 18:35:06,901 INFO L235 CfgBuilder]: Building ICFG [2022-11-25 18:35:06,904 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-11-25 18:35:11,211 INFO L276 CfgBuilder]: Performing block encoding [2022-11-25 18:35:11,249 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-11-25 18:35:11,249 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-11-25 18:35:11,257 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:35:11 BoogieIcfgContainer [2022-11-25 18:35:11,257 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-11-25 18:35:11,259 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-11-25 18:35:11,259 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-11-25 18:35:11,264 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-11-25 18:35:11,265 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-25 18:35:11,265 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 25.11 06:35:05" (1/3) ... [2022-11-25 18:35:11,267 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@49e665c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 25.11 06:35:11, skipping insertion in model container [2022-11-25 18:35:11,268 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-25 18:35:11,268 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 25.11 06:35:06" (2/3) ... [2022-11-25 18:35:11,270 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@49e665c8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 25.11 06:35:11, skipping insertion in model container [2022-11-25 18:35:11,270 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-11-25 18:35:11,270 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 25.11 06:35:11" (3/3) ... [2022-11-25 18:35:11,283 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product11.cil.c [2022-11-25 18:35:11,386 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-11-25 18:35:11,386 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-11-25 18:35:11,386 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-11-25 18:35:11,386 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-11-25 18:35:11,387 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-11-25 18:35:11,387 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-11-25 18:35:11,387 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-11-25 18:35:11,387 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-11-25 18:35:11,401 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:11,508 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-11-25 18:35:11,508 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:11,508 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:11,527 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:11,527 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:11,527 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-11-25 18:35:11,534 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:11,562 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1223 [2022-11-25 18:35:11,563 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:11,563 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:11,569 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:11,570 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:11,591 INFO L748 eck$LassoCheckResult]: Stem: 645#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2392#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1780#L3410true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1671#L3403true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 825#L3418true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 632#L408true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 498#L377true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1569#L2548true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1085#L467true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1883#L492true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1413#L3068true assume 0 == initPersonOnFloor_~floor#1; 90#L3069true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1348#L3176-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 682#L2860true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2285#L2872-2true assume { :end_inline_callOnFloor } true; 1887#L3212true assume { :end_inline_initPersonOnFloor } true; 856#L177true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1293#L2797true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1228#L2824true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 530#L2429true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 185#L1813true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1692#L1144true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 2438#L1817true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2235#L1830true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2057#L1966true assume !(0 != timeShift_~tmp___9~2#1); 1895#L2057true assume 1 == ~doorState~0;~doorState~0 := 0; 666#L2057-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 21#L2797-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 141#L2824-3true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2278#L2429-1true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2223#L1696true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1570#L1144-1true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1356#L1709true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1414#L2065true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 191#L1753true assume !(1 == ~currentHeading~0); 1236#L1763true assume !(0 == ~currentFloorID~0); 1851#L1763-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1650#L1769-1true assume { :end_inline_continueInDirection } true; 441#L2074-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1586#L1144-3true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 548#L2593true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1687#L2594true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 65#L1153true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1303#L2598true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 754#L2653true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1115#L2089true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1989#L207-2true [2022-11-25 18:35:11,592 INFO L750 eck$LassoCheckResult]: Loop: 1989#L207-2true assume !false; 921#L208true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 284#L211true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1995#L990true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1088#L215true assume 1 != cleanup_~tmp___0~0#1; 2043#L215-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 978#L2797-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2072#L2824-25true anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 2344#L1252true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1086#L1316true isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 2106#L1329true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1362#L227true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 271#L2797-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 298#L2824-30true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2265#L2429-3true stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 160#L1813-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2218#L1144-4true stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1754#L1817-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2472#L1830-1true timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 2209#L1966-2true assume !(0 != timeShift_~tmp___9~2#1); 834#L2057-3true assume 1 == ~doorState~0;~doorState~0 := 0; 964#L2057-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1596#L2797-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1721#L2824-33true isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1462#L2429-4true stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 2197#L1696-2true assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 51#L1144-5true stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2077#L1709-2true timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1364#L2065-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 412#L1753-3true assume !(1 == ~currentHeading~0); 471#L1763-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1094#L1763-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2477#L1769-7true assume { :end_inline_continueInDirection } true; 2216#L2074-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 172#L1144-7true __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 211#L2593-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1932#L2594-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 2102#L1153-5true __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1068#L2598-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 145#L2653-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1237#L2089-1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1989#L207-2true [2022-11-25 18:35:11,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:11,604 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 1 times [2022-11-25 18:35:11,614 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:11,614 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520935214] [2022-11-25 18:35:11,615 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:11,615 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:11,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:12,038 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:12,039 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:12,039 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520935214] [2022-11-25 18:35:12,040 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520935214] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:12,040 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:12,041 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:12,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702018876] [2022-11-25 18:35:12,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:12,048 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:12,049 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:12,049 INFO L85 PathProgramCache]: Analyzing trace with hash -1878229724, now seen corresponding path program 1 times [2022-11-25 18:35:12,049 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:12,050 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1118055842] [2022-11-25 18:35:12,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:12,050 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:12,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:12,304 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:12,305 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:12,305 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1118055842] [2022-11-25 18:35:12,305 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1118055842] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:12,305 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:12,305 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:35:12,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [642215211] [2022-11-25 18:35:12,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:12,307 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:12,308 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:12,347 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 18:35:12,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:35:12,358 INFO L87 Difference]: Start difference. First operand has 2479 states, 2478 states have (on average 1.8652138821630346) internal successors, (4622), 2478 states have internal predecessors, (4622), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:17,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:17,092 INFO L93 Difference]: Finished difference Result 18772 states and 34781 transitions. [2022-11-25 18:35:17,093 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18772 states and 34781 transitions. [2022-11-25 18:35:17,254 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 8992 [2022-11-25 18:35:17,483 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18772 states to 18592 states and 34585 transitions. [2022-11-25 18:35:17,484 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18592 [2022-11-25 18:35:17,508 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18592 [2022-11-25 18:35:17,509 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18592 states and 34585 transitions. [2022-11-25 18:35:17,542 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-25 18:35:17,542 INFO L218 hiAutomatonCegarLoop]: Abstraction has 18592 states and 34585 transitions. [2022-11-25 18:35:17,580 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18592 states and 34585 transitions. [2022-11-25 18:35:17,775 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18592 to 7054. [2022-11-25 18:35:17,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7054 states, 7054 states have (on average 1.8622058406577828) internal successors, (13136), 7053 states have internal predecessors, (13136), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:17,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7054 states to 7054 states and 13136 transitions. [2022-11-25 18:35:17,815 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2022-11-25 18:35:17,816 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-11-25 18:35:17,820 INFO L428 stractBuchiCegarLoop]: Abstraction has 7054 states and 13136 transitions. [2022-11-25 18:35:17,820 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-11-25 18:35:17,820 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7054 states and 13136 transitions. [2022-11-25 18:35:17,856 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3578 [2022-11-25 18:35:17,856 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:17,856 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:17,859 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:17,859 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:17,860 INFO L748 eck$LassoCheckResult]: Stem: 22555#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 22556#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 23657#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23598#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 22825#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 22537#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 22308#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 22309#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 23144#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 22441#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23416#L3068 assume 0 == initPersonOnFloor_~floor#1; 21517#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 21304#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 22615#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22299#L2872-2 assume { :end_inline_callOnFloor } true; 23707#L3212 assume { :end_inline_initPersonOnFloor } true; 22868#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 22869#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23275#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 22359#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 21724#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21726#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23609#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23881#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 27231#L1966 assume !(0 != timeShift_~tmp___9~2#1); 27232#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 28190#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28189#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28188#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28187#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28185#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 28186#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 28194#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 28192#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 28191#L1753 assume !(1 == ~currentHeading~0); 23283#L1763 assume !(0 == ~currentFloorID~0); 23284#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23580#L1769-1 assume { :end_inline_continueInDirection } true; 22216#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 22217#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 22392#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 22393#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 21459#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 21460#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 21379#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 22723#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 26489#L207-2 [2022-11-25 18:35:17,860 INFO L750 eck$LassoCheckResult]: Loop: 26489#L207-2 assume !false; 26488#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 26487#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 26486#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 23147#L215 assume 1 != cleanup_~tmp___0~0#1; 23148#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 23021#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23022#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 26463#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 26456#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 26455#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 24028#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 24027#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 23954#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 24004#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 23952#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 23951#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 23950#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 23641#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 23841#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 23842#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28229#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 28228#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 28227#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 28226#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 28225#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 21423#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 21424#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 23379#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 23380#L1753-3 assume !(1 == ~currentHeading~0); 22265#L1763-9 assume !(0 == ~currentFloorID~0); 21412#L1763-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23152#L1769-7 assume { :end_inline_continueInDirection } true; 22267#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 27349#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 27348#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 27347#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 27344#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 27338#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 27328#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 26490#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 26489#L207-2 [2022-11-25 18:35:17,861 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:17,861 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 2 times [2022-11-25 18:35:17,861 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:17,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1653421930] [2022-11-25 18:35:17,862 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:17,862 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:17,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:17,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:17,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:17,957 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1653421930] [2022-11-25 18:35:17,957 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1653421930] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:17,957 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:17,957 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:17,958 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579734037] [2022-11-25 18:35:17,958 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:17,958 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:17,959 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:17,959 INFO L85 PathProgramCache]: Analyzing trace with hash -1177165146, now seen corresponding path program 1 times [2022-11-25 18:35:17,959 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:17,960 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1965079553] [2022-11-25 18:35:17,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:17,960 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:17,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:17,992 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:17,994 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:17,995 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1965079553] [2022-11-25 18:35:17,995 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1965079553] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:17,995 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:17,997 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:17,997 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [535666423] [2022-11-25 18:35:17,997 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:17,998 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:17,998 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:17,998 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:35:17,998 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:35:17,999 INFO L87 Difference]: Start difference. First operand 7054 states and 13136 transitions. cyclomatic complexity: 6084 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:18,200 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:18,200 INFO L93 Difference]: Finished difference Result 10664 states and 19818 transitions. [2022-11-25 18:35:18,201 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10664 states and 19818 transitions. [2022-11-25 18:35:18,374 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7128 [2022-11-25 18:35:18,440 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10664 states to 10664 states and 19818 transitions. [2022-11-25 18:35:18,441 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10664 [2022-11-25 18:35:18,453 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10664 [2022-11-25 18:35:18,453 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10664 states and 19818 transitions. [2022-11-25 18:35:18,468 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-25 18:35:18,468 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10664 states and 19818 transitions. [2022-11-25 18:35:18,480 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10664 states and 19818 transitions. [2022-11-25 18:35:18,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10664 to 10656. [2022-11-25 18:35:18,660 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10656 states, 10656 states have (on average 1.8586711711711712) internal successors, (19806), 10655 states have internal predecessors, (19806), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:18,695 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10656 states to 10656 states and 19806 transitions. [2022-11-25 18:35:18,696 INFO L240 hiAutomatonCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2022-11-25 18:35:18,696 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:35:18,697 INFO L428 stractBuchiCegarLoop]: Abstraction has 10656 states and 19806 transitions. [2022-11-25 18:35:18,697 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-11-25 18:35:18,698 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10656 states and 19806 transitions. [2022-11-25 18:35:18,749 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7120 [2022-11-25 18:35:18,749 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:18,750 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:18,753 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:18,753 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:18,754 INFO L748 eck$LassoCheckResult]: Stem: 40282#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 40283#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 41400#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 41343#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 40552#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 40264#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 40035#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 40036#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 40876#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 40168#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41159#L3068 assume 0 == initPersonOnFloor_~floor#1; 39242#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 39032#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 40343#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 40028#L2872-2 assume { :end_inline_callOnFloor } true; 41454#L3212 assume { :end_inline_initPersonOnFloor } true; 40597#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40598#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41063#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 40085#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 39452#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39454#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 41354#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 41605#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41532#L1966 assume !(0 != timeShift_~tmp___9~2#1); 41457#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 40317#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 39071#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 39072#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 39357#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41598#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 41272#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39539#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41115#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39466#L1753 assume !(1 == ~currentHeading~0); 39467#L1763 assume !(0 == ~currentFloorID~0); 41015#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41442#L1769-1 assume { :end_inline_continueInDirection } true; 45312#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45310#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45307#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45306#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45292#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45271#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45267#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45265#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 45264#L207-2 [2022-11-25 18:35:18,755 INFO L750 eck$LassoCheckResult]: Loop: 45264#L207-2 assume !false; 45263#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 45262#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 45261#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 45260#L215 assume 1 != cleanup_~tmp___0~0#1; 45259#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45249#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 45239#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 45231#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 45222#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 45221#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 45220#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 45219#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 42320#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 45218#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 45217#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45215#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 45213#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 39301#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 41592#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 40568#L2057-3 assume 1 == ~doorState~0;~doorState~0 := 0; 40569#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 40731#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 41292#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 41202#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 41203#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 39148#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 39149#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 41121#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 39895#L1753-3 assume !(1 == ~currentHeading~0); 39896#L1763-9 assume !(0 == ~currentFloorID~0); 39133#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 40883#L1769-7 assume { :end_inline_continueInDirection } true; 45311#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 45309#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 45308#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 45305#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 45301#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 45289#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 45268#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 45266#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 45264#L207-2 [2022-11-25 18:35:18,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:18,759 INFO L85 PathProgramCache]: Analyzing trace with hash 2059140603, now seen corresponding path program 3 times [2022-11-25 18:35:18,759 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:18,760 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [845042248] [2022-11-25 18:35:18,760 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:18,761 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:18,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:18,867 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:18,867 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:18,867 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [845042248] [2022-11-25 18:35:18,867 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [845042248] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:18,868 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:18,868 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:18,868 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1426885858] [2022-11-25 18:35:18,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:18,869 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:18,869 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:18,870 INFO L85 PathProgramCache]: Analyzing trace with hash -1570192156, now seen corresponding path program 1 times [2022-11-25 18:35:18,870 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:18,870 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849030578] [2022-11-25 18:35:18,870 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:18,871 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:18,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:18,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:18,955 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:18,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849030578] [2022-11-25 18:35:18,956 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849030578] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:18,956 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:18,957 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:35:18,957 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261571119] [2022-11-25 18:35:18,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:18,957 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:18,959 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:18,959 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:35:18,960 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:35:18,960 INFO L87 Difference]: Start difference. First operand 10656 states and 19806 transitions. cyclomatic complexity: 9152 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:19,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:19,693 INFO L93 Difference]: Finished difference Result 38585 states and 71368 transitions. [2022-11-25 18:35:19,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 38585 states and 71368 transitions. [2022-11-25 18:35:19,964 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 33918 [2022-11-25 18:35:20,381 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 38585 states to 38585 states and 71368 transitions. [2022-11-25 18:35:20,382 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 38585 [2022-11-25 18:35:20,430 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 38585 [2022-11-25 18:35:20,430 INFO L73 IsDeterministic]: Start isDeterministic. Operand 38585 states and 71368 transitions. [2022-11-25 18:35:20,474 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-11-25 18:35:20,475 INFO L218 hiAutomatonCegarLoop]: Abstraction has 38585 states and 71368 transitions. [2022-11-25 18:35:20,510 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 38585 states and 71368 transitions. [2022-11-25 18:35:20,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 38585 to 13661. [2022-11-25 18:35:20,977 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 13661 states, 13661 states have (on average 1.8443744967425517) internal successors, (25196), 13660 states have internal predecessors, (25196), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:21,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13661 states to 13661 states and 25196 transitions. [2022-11-25 18:35:21,010 INFO L240 hiAutomatonCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2022-11-25 18:35:21,011 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 18:35:21,012 INFO L428 stractBuchiCegarLoop]: Abstraction has 13661 states and 25196 transitions. [2022-11-25 18:35:21,012 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-11-25 18:35:21,013 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13661 states and 25196 transitions. [2022-11-25 18:35:21,064 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9188 [2022-11-25 18:35:21,064 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:21,064 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:21,069 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:21,069 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:21,070 INFO L748 eck$LassoCheckResult]: Stem: 89551#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 89552#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 90762#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 90693#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 89829#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 89532#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 89301#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 89302#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 90171#L467 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 89437#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 90482#L3068 assume 0 == initPersonOnFloor_~floor#1; 88502#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 88292#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 89612#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 89294#L2872-2 assume { :end_inline_callOnFloor } true; 90827#L3212 assume { :end_inline_initPersonOnFloor } true; 89874#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 89875#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 90372#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 89352#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 88714#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 88716#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 90708#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 91054#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 90923#L1966 assume !(0 != timeShift_~tmp___9~2#1); 90924#L2057 assume !(1 == ~doorState~0); 91304#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 98401#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 98400#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 98395#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 90993#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 90994#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 90429#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 90430#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 91537#L1753 assume !(1 == ~currentHeading~0); 91538#L1763 assume !(0 == ~currentFloorID~0); 90809#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90810#L1769-1 assume { :end_inline_continueInDirection } true; 98387#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98383#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98384#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98380#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98381#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98375#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98376#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99486#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 99485#L207-2 [2022-11-25 18:35:21,072 INFO L750 eck$LassoCheckResult]: Loop: 99485#L207-2 assume !false; 99484#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 99483#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 99482#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 99477#L215 assume 1 != cleanup_~tmp___0~0#1; 99472#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99471#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99460#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 99452#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 99443#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 99442#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 99437#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99435#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 93802#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99434#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 99433#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99432#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 99431#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 90743#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 99765#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 99763#L2057-3 assume !(1 == ~doorState~0); 99762#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 99761#L2797-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 99755#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 99689#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 99652#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 99651#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 99650#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 99648#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 99649#L1753-3 assume !(1 == ~currentHeading~0); 89260#L1763-9 assume !(0 == ~currentFloorID~0); 88393#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 90178#L1769-7 assume { :end_inline_continueInDirection } true; 99040#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 98681#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 98682#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 98676#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 98677#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 98671#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 98673#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 99487#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 99485#L207-2 [2022-11-25 18:35:21,072 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:21,073 INFO L85 PathProgramCache]: Analyzing trace with hash -1813124867, now seen corresponding path program 1 times [2022-11-25 18:35:21,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:21,074 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1484924126] [2022-11-25 18:35:21,074 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:21,075 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:21,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:21,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:21,163 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:21,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1484924126] [2022-11-25 18:35:21,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1484924126] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:21,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:21,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:21,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [699728365] [2022-11-25 18:35:21,165 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:21,165 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:21,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:21,166 INFO L85 PathProgramCache]: Analyzing trace with hash -1147490330, now seen corresponding path program 1 times [2022-11-25 18:35:21,166 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:21,166 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1660083234] [2022-11-25 18:35:21,166 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:21,166 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:21,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-25 18:35:21,180 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-11-25 18:35:21,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-11-25 18:35:21,216 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-11-25 18:35:22,937 INFO L210 LassoAnalysis]: Preferences: [2022-11-25 18:35:22,938 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-25 18:35:22,938 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-25 18:35:22,938 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-25 18:35:22,939 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-11-25 18:35:22,939 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:22,940 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-25 18:35:22,940 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-25 18:35:22,940 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2022-11-25 18:35:22,940 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-25 18:35:22,940 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-25 18:35:22,972 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:22,983 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:22,988 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:22,990 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:22,993 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,001 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,003 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,006 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,011 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,014 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,016 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,018 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,020 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,022 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,025 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,027 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,034 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,046 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,055 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,057 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,059 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,061 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,078 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,081 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,087 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,089 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,092 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,104 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,106 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,112 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,116 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,120 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,129 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,132 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,134 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,136 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,138 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,141 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,148 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,150 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,157 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,160 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,162 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,165 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,168 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,175 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,177 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,179 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,183 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,185 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,187 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,189 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,192 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,198 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,200 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,202 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,204 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,206 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,215 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,217 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,219 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,222 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,236 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,240 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,249 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,251 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,254 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,256 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:23,258 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:24,051 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-25 18:35:24,052 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-11-25 18:35:24,055 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,055 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,057 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,060 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-11-25 18:35:24,062 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,062 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,080 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,080 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret118#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,086 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,087 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,087 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,088 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,095 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-11-25 18:35:24,103 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,103 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,122 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,122 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret47#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,133 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,136 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,136 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,138 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,146 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,147 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,160 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-11-25 18:35:24,161 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,161 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret61#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,164 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,165 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,165 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,166 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,168 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-11-25 18:35:24,170 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,170 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,205 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,205 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret45#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,210 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-11-25 18:35:24,210 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,210 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,212 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,215 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-11-25 18:35:24,226 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,226 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,249 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,250 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~0#1=0, ULTIMATE.start_isBlocked_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,286 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-11-25 18:35:24,287 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,287 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,302 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,371 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,371 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,384 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-11-25 18:35:24,395 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,395 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret46#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,405 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,406 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,406 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,407 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,409 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-11-25 18:35:24,417 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,418 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,439 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,440 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret125#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,448 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,448 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,449 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,453 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,454 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-11-25 18:35:24,455 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,455 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,468 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,468 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,474 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2022-11-25 18:35:24,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,475 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,476 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,482 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-11-25 18:35:24,483 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,483 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,495 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,495 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret65#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,498 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,499 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,500 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,506 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-11-25 18:35:24,507 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,507 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,519 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,519 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___1~8#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,522 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2022-11-25 18:35:24,522 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,522 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,523 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,525 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-11-25 18:35:24,527 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,527 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,542 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,542 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,550 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,550 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,550 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,551 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,554 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-11-25 18:35:24,557 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,557 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,569 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,569 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret87#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,572 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,573 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,573 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,574 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,578 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-11-25 18:35:24,578 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,579 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,602 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,602 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,610 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,611 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,611 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,612 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,623 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,623 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,637 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-11-25 18:35:24,650 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,650 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret127#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,653 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,654 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,654 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,655 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,667 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,667 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,680 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-11-25 18:35:24,699 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,699 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_#t~ret126#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,702 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,702 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,702 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,704 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,707 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-11-25 18:35:24,708 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,708 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,728 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,728 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,731 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2022-11-25 18:35:24,731 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,732 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,732 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-11-25 18:35:24,735 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,735 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,763 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,763 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,767 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2022-11-25 18:35:24,767 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,767 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,768 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,778 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-11-25 18:35:24,779 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,779 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,811 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,811 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_areDoorsOpen_#res#1=-5, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=-5, ~doorState~0=-5, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=-5} Honda state: {ULTIMATE.start_areDoorsOpen_#res#1=-5, ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___4~3#1=-5, ~doorState~0=-5, ULTIMATE.start_areDoorsOpen_~retValue_acc~10#1=-5} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,819 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,820 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,820 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,821 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,834 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-11-25 18:35:24,835 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,838 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,870 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,870 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,883 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,884 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,884 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,885 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,899 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,900 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,913 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-11-25 18:35:24,922 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,922 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification2_spec__3_~tmp___2~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,930 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,930 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,931 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,932 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,936 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,936 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,949 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-11-25 18:35:24,954 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-11-25 18:35:24,954 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret67#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-11-25 18:35:24,958 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:24,958 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,958 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,959 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,961 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-11-25 18:35:24,962 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-11-25 18:35:24,962 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:24,981 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2022-11-25 18:35:24,981 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:24,981 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:24,982 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:24,984 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-11-25 18:35:24,985 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-11-25 18:35:24,985 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-11-25 18:35:26,147 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-11-25 18:35:26,152 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2022-11-25 18:35:26,152 INFO L210 LassoAnalysis]: Preferences: [2022-11-25 18:35:26,152 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-11-25 18:35:26,152 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-11-25 18:35:26,152 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-11-25 18:35:26,152 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-11-25 18:35:26,152 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:26,152 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-11-25 18:35:26,153 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-11-25 18:35:26,153 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec2_product11.cil.c_Iteration4_Loop [2022-11-25 18:35:26,153 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-11-25 18:35:26,153 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-11-25 18:35:26,158 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,174 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,177 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,179 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,199 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,202 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,205 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,207 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,210 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,217 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,219 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,222 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,225 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,231 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,245 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,265 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,277 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,284 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,287 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,291 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,295 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,305 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,308 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,311 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,314 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,322 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,325 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,329 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,332 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,336 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,343 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,346 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,349 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,351 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,354 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,356 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,359 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,361 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,364 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,367 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,369 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,372 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,380 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,382 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,385 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,387 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,390 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,392 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,394 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,397 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,399 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,401 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,408 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,410 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,415 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,418 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,420 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,422 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,425 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,447 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,451 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,453 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,455 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,460 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,462 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,465 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,467 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,469 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:26,471 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-11-25 18:35:27,276 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-11-25 18:35:27,281 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-11-25 18:35:27,282 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,282 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,284 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,291 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,304 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,304 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,305 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,305 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,305 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,307 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,307 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,308 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-11-25 18:35:27,318 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,321 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,322 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,323 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,324 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,338 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,351 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,351 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,351 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,351 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,352 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,353 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,353 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,354 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-11-25 18:35:27,364 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,372 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,372 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,372 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,375 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,380 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,392 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,393 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,393 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,393 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,393 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,394 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,394 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,396 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-11-25 18:35:27,405 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,413 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,414 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,414 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,415 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,419 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,432 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,432 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,432 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,432 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-11-25 18:35:27,433 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,443 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-11-25 18:35:27,445 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-11-25 18:35:27,445 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,465 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,474 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,474 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,474 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,476 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,480 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,493 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,493 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,493 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,493 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,493 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,494 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,494 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,496 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-11-25 18:35:27,513 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,521 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,522 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,522 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,523 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,527 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,537 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-11-25 18:35:27,540 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,540 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,540 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,540 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,541 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,541 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,541 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,565 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,573 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,574 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,575 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,579 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,590 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-11-25 18:35:27,591 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,591 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,592 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,592 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,592 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,592 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,592 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,605 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,613 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,614 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,614 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,615 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,619 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,631 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,631 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,631 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,631 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,631 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,632 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,632 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,634 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-11-25 18:35:27,648 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,656 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,656 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,656 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,657 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,660 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,673 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,673 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,673 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,673 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,673 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,673 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-11-25 18:35:27,674 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,675 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,690 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,693 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,694 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,694 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,695 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,719 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,732 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,732 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,732 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,732 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,732 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,733 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,733 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,734 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-11-25 18:35:27,748 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,756 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,756 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,756 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,757 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,762 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,775 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-11-25 18:35:27,775 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,775 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,775 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,775 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,775 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,776 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,776 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,789 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,797 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,798 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,798 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,799 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,803 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,816 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,816 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,817 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,817 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,817 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,817 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,817 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,826 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,817 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-11-25 18:35:27,835 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,835 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,836 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,838 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,842 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,855 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,855 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,855 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,855 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,855 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,857 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-11-25 18:35:27,857 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,857 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,881 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,890 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,890 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,890 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,891 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,895 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,907 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,907 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,907 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,907 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-11-25 18:35:27,907 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,911 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-11-25 18:35:27,913 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-11-25 18:35:27,913 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,929 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-11-25 18:35:27,934 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:27,934 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,934 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:27,935 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:27,939 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-11-25 18:35:27,940 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-11-25 18:35:27,953 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-11-25 18:35:27,953 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-11-25 18:35:27,954 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-11-25 18:35:27,954 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-11-25 18:35:27,954 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-11-25 18:35:27,958 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-11-25 18:35:27,958 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-11-25 18:35:27,969 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-11-25 18:35:27,996 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-11-25 18:35:27,996 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-11-25 18:35:27,998 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-11-25 18:35:27,998 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 [2022-11-25 18:35:28,016 INFO L229 MonitoredProcess]: Starting monitored process 40 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-11-25 18:35:28,027 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2022-11-25 18:35:28,027 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-11-25 18:35:28,027 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-11-25 18:35:28,027 INFO L513 LassoAnalysis]: Proved termination. [2022-11-25 18:35:28,028 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-11-25 18:35:28,030 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:28,032 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-11-25 18:35:28,055 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:28,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:28,178 INFO L263 TraceCheckSpWp]: Trace formula consists of 600 conjuncts, 2 conjunts are in the unsatisfiable core [2022-11-25 18:35:28,182 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 18:35:28,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:28,304 INFO L263 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2022-11-25 18:35:28,310 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-11-25 18:35:28,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:28,470 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2022-11-25 18:35:28,471 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537 Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:30,068 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 13661 states and 25196 transitions. cyclomatic complexity: 11537. Second operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 40138 states and 74108 transitions. Complement of second has 11 states. [2022-11-25 18:35:30,071 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2022-11-25 18:35:30,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 12.428571428571429) internal successors, (87), 7 states have internal predecessors, (87), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:30,078 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 6736 transitions. [2022-11-25 18:35:30,080 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 41 letters. [2022-11-25 18:35:30,080 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_ae722fe1-dbe8-4f0a-bda6-bd8d62048a20/bin/uautomizer-ZsLfNo2U6R/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2022-11-25 18:35:30,087 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-25 18:35:30,087 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 87 letters. Loop has 41 letters. [2022-11-25 18:35:30,088 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-25 18:35:30,088 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 6736 transitions. Stem has 46 letters. Loop has 82 letters. [2022-11-25 18:35:30,090 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-11-25 18:35:30,090 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40138 states and 74108 transitions. [2022-11-25 18:35:30,311 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20337 [2022-11-25 18:35:30,484 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40138 states to 40138 states and 74108 transitions. [2022-11-25 18:35:30,484 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26597 [2022-11-25 18:35:30,529 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26998 [2022-11-25 18:35:30,530 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40138 states and 74108 transitions. [2022-11-25 18:35:30,530 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:30,530 INFO L218 hiAutomatonCegarLoop]: Abstraction has 40138 states and 74108 transitions. [2022-11-25 18:35:30,559 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40138 states and 74108 transitions. [2022-11-25 18:35:31,067 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40138 to 39523. [2022-11-25 18:35:31,135 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8504162133441286) internal successors, (73134), 39522 states have internal predecessors, (73134), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:31,255 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73134 transitions. [2022-11-25 18:35:31,255 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39523 states and 73134 transitions. [2022-11-25 18:35:31,256 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:31,256 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:35:31,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:35:31,257 INFO L87 Difference]: Start difference. First operand 39523 states and 73134 transitions. Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:31,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:31,542 INFO L93 Difference]: Finished difference Result 39523 states and 73128 transitions. [2022-11-25 18:35:31,543 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39523 states and 73128 transitions. [2022-11-25 18:35:31,815 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:32,221 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39523 states to 39523 states and 73128 transitions. [2022-11-25 18:35:32,222 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26429 [2022-11-25 18:35:32,247 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26429 [2022-11-25 18:35:32,261 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39523 states and 73128 transitions. [2022-11-25 18:35:32,272 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:32,285 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2022-11-25 18:35:32,325 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39523 states and 73128 transitions. [2022-11-25 18:35:32,905 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39523 to 39523. [2022-11-25 18:35:32,947 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39523 states, 39523 states have (on average 1.8502644030058446) internal successors, (73128), 39522 states have internal predecessors, (73128), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:33,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39523 states to 39523 states and 73128 transitions. [2022-11-25 18:35:33,036 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2022-11-25 18:35:33,036 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:35:33,039 INFO L428 stractBuchiCegarLoop]: Abstraction has 39523 states and 73128 transitions. [2022-11-25 18:35:33,039 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-11-25 18:35:33,039 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39523 states and 73128 transitions. [2022-11-25 18:35:33,178 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:33,178 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:33,178 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:33,180 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:33,180 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:33,181 INFO L748 eck$LassoCheckResult]: Stem: 223316#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 223317#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 225069#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 224971#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 223715#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 223290#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 222958#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 222959#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 224214#L467 assume !(0 == getOrigin_~person#1); 223445#L471 assume !(1 == getOrigin_~person#1); 223446#L475 assume !(2 == getOrigin_~person#1); 223153#L479 assume !(3 == getOrigin_~person#1); 223154#L483 assume !(4 == getOrigin_~person#1); 223280#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 224241#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 224670#L3068 assume 0 == initPersonOnFloor_~floor#1; 221759#L3069 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 221439#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 223406#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 222949#L2872-2 assume { :end_inline_callOnFloor } true; 225169#L3212 assume { :end_inline_initPersonOnFloor } true; 223789#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 223790#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 224416#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 224417#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 222094#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222096#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 225485#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 225416#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 225417#L1966 assume !(0 != timeShift_~tmp___9~2#1); 225174#L2057 assume !(1 == ~doorState~0); 225175#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 233401#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 233400#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 233399#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 233398#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 233382#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 233381#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 233380#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 233347#L1753 assume !(1 == ~currentHeading~0); 233348#L1763 assume !(0 == ~currentFloorID~0); 225495#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 233278#L1769-1 assume { :end_inline_continueInDirection } true; 239294#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239293#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 239292#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 239290#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 239291#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 239274#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 239270#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 239269#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 239181#L207-2 assume !false; 239182#L208 [2022-11-25 18:35:33,182 INFO L750 eck$LassoCheckResult]: Loop: 239182#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 250547#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 250546#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 250545#L215 assume 1 != cleanup_~tmp___0~0#1; 250544#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250543#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250542#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 250526#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 250027#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 250026#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 250025#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250024#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 243279#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 250023#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 250021#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 250018#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 250012#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 249995#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 249994#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 249987#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 249983#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 249984#L1968-2 assume !(0 != ~persons_0~0); 255841#L1968-3 assume !(0 != ~persons_1~0); 255835#L1982-1 assume !(0 != ~persons_2~0); 255810#L1996-1 assume !(0 != ~persons_3~0); 255805#L2010-1 assume !(0 != ~persons_4~0); 255800#L2024-1 assume !(0 != ~persons_5~0); 255796#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 255795#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 255764#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 255747#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 255745#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 255743#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 255742#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 255722#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 255702#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 255700#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 255698#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 255697#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 255678#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 255656#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 255653#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 255651#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 255650#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 254640#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 254613#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 254611#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 254609#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 254608#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 254594#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 254568#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 254559#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 254558#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 254557#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 251755#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 251720#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 251718#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 251716#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 251715#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 251710#L2844-41 assume { :end_inline_resetCallOnFloor } true; 251709#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 250567#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 250563#L1127-5 assume { :end_inline_resetFloorButton } true; 250561#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 250559#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 250558#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 250556#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 250109#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 250555#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 250082#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 250549#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 250548#L207-2 assume !false; 239182#L208 [2022-11-25 18:35:33,182 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:33,182 INFO L85 PathProgramCache]: Analyzing trace with hash -1486397763, now seen corresponding path program 1 times [2022-11-25 18:35:33,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:33,183 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1424734850] [2022-11-25 18:35:33,183 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:33,183 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:33,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:33,569 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:33,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:33,570 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1424734850] [2022-11-25 18:35:33,570 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1424734850] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:33,570 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:33,570 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-11-25 18:35:33,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1057881432] [2022-11-25 18:35:33,571 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:33,571 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:33,571 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:33,571 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 1 times [2022-11-25 18:35:33,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:33,572 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1735806237] [2022-11-25 18:35:33,572 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:33,572 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:33,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:33,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:33,696 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:33,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1735806237] [2022-11-25 18:35:33,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1735806237] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:33,696 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:33,696 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:33,697 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [101458145] [2022-11-25 18:35:33,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:33,697 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:33,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:33,698 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:35:33,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:35:33,698 INFO L87 Difference]: Start difference. First operand 39523 states and 73128 transitions. cyclomatic complexity: 33614 Second operand has 6 states, 6 states have (on average 8.666666666666666) internal successors, (52), 6 states have internal predecessors, (52), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:34,010 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:34,010 INFO L93 Difference]: Finished difference Result 39517 states and 73115 transitions. [2022-11-25 18:35:34,010 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73115 transitions. [2022-11-25 18:35:34,388 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:34,555 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73115 transitions. [2022-11-25 18:35:34,555 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2022-11-25 18:35:34,585 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2022-11-25 18:35:34,585 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73115 transitions. [2022-11-25 18:35:34,586 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:34,586 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2022-11-25 18:35:34,616 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73115 transitions. [2022-11-25 18:35:35,137 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2022-11-25 18:35:35,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.850216362578131) internal successors, (73115), 39516 states have internal predecessors, (73115), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:35,262 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73115 transitions. [2022-11-25 18:35:35,262 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2022-11-25 18:35:35,263 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 18:35:35,265 INFO L428 stractBuchiCegarLoop]: Abstraction has 39517 states and 73115 transitions. [2022-11-25 18:35:35,265 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-11-25 18:35:35,265 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73115 transitions. [2022-11-25 18:35:35,596 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:35,596 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:35,597 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:35,601 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:35,601 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:35,602 INFO L748 eck$LassoCheckResult]: Stem: 302384#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 302385#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 304128#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 304029#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 302781#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 302357#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 302020#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 302021#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 303281#L467 assume !(0 == getOrigin_~person#1); 302508#L471 assume !(1 == getOrigin_~person#1); 302509#L475 assume !(2 == getOrigin_~person#1); 302213#L479 assume !(3 == getOrigin_~person#1); 302214#L483 assume !(4 == getOrigin_~person#1); 302342#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 303307#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 303735#L3068 assume !(0 == initPersonOnFloor_~floor#1); 302325#L3095 assume 1 == initPersonOnFloor_~floor#1; 302326#L3096 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 300501#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 302468#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 302011#L2872-2 assume { :end_inline_callOnFloor } true; 304222#L3212 assume { :end_inline_initPersonOnFloor } true; 302858#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 302859#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 303482#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 303483#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 301153#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 301155#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 304536#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 304473#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 304474#L1966 assume !(0 != timeShift_~tmp___9~2#1); 304227#L2057 assume !(1 == ~doorState~0); 302435#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 300563#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 300564#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 301004#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 304460#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 304461#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 306311#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 306309#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 301170#L1753 assume !(1 == ~currentHeading~0); 301171#L1763 assume !(0 == ~currentFloorID~0); 303494#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303999#L1769-1 assume { :end_inline_continueInDirection } true; 301889#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 301890#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 302137#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 302138#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 300739#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 300740#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 300611#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 302626#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 303321#L207-2 assume !false; 318850#L208 [2022-11-25 18:35:35,602 INFO L750 eck$LassoCheckResult]: Loop: 318850#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 330785#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 330784#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 330783#L215 assume 1 != cleanup_~tmp___0~0#1; 330782#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 330781#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 330780#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 330764#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 330755#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 330754#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 330753#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 330752#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 320794#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 330751#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 330749#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 330750#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 332544#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 332538#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 332537#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 332535#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 332533#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 329215#L1968-2 assume !(0 != ~persons_0~0); 335994#L1968-3 assume !(0 != ~persons_1~0); 335988#L1982-1 assume !(0 != ~persons_2~0); 335963#L1996-1 assume !(0 != ~persons_3~0); 335958#L2010-1 assume !(0 != ~persons_4~0); 335953#L2024-1 assume !(0 != ~persons_5~0); 335949#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335948#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 335923#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335906#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 335904#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 335901#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335898#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 335880#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335860#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 335858#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 335856#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335855#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 335830#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335807#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 335805#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 335803#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335802#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 335785#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335758#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 335756#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 335754#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335752#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 335734#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 335701#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 335698#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 335697#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 335696#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 330853#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 330818#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 330816#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 330814#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 330813#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 330808#L2844-41 assume { :end_inline_resetCallOnFloor } true; 330807#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 330805#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 330801#L1127-5 assume { :end_inline_resetFloorButton } true; 330799#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 330797#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 330796#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 330794#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 328889#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 330793#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 328865#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 330787#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 330786#L207-2 assume !false; 318850#L208 [2022-11-25 18:35:35,603 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:35,603 INFO L85 PathProgramCache]: Analyzing trace with hash 743878906, now seen corresponding path program 1 times [2022-11-25 18:35:35,603 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:35,604 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1271566317] [2022-11-25 18:35:35,604 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:35,604 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:35,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:35,700 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:35,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:35,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1271566317] [2022-11-25 18:35:35,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1271566317] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:35,701 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:35,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:35,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1602521713] [2022-11-25 18:35:35,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:35,702 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:35,702 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:35,702 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 2 times [2022-11-25 18:35:35,703 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:35,703 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1657456989] [2022-11-25 18:35:35,703 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:35,703 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:35,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:35,837 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:35,837 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:35,838 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1657456989] [2022-11-25 18:35:35,838 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1657456989] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:35,838 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:35,838 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:35,838 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [311405130] [2022-11-25 18:35:35,838 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:35,839 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:35,839 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:35,840 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:35,840 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:35,840 INFO L87 Difference]: Start difference. First operand 39517 states and 73115 transitions. cyclomatic complexity: 33607 Second operand has 4 states, 4 states have (on average 13.25) internal successors, (53), 4 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:36,226 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:36,226 INFO L93 Difference]: Finished difference Result 39517 states and 73111 transitions. [2022-11-25 18:35:36,227 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73111 transitions. [2022-11-25 18:35:36,435 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:36,602 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73111 transitions. [2022-11-25 18:35:36,602 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2022-11-25 18:35:36,629 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2022-11-25 18:35:36,630 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73111 transitions. [2022-11-25 18:35:36,632 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:36,633 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2022-11-25 18:35:36,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73111 transitions. [2022-11-25 18:35:37,279 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2022-11-25 18:35:37,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8501151403193563) internal successors, (73111), 39516 states have internal predecessors, (73111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:37,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73111 transitions. [2022-11-25 18:35:37,637 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2022-11-25 18:35:37,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:37,637 INFO L428 stractBuchiCegarLoop]: Abstraction has 39517 states and 73111 transitions. [2022-11-25 18:35:37,638 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-11-25 18:35:37,638 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73111 transitions. [2022-11-25 18:35:37,761 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:37,762 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:37,762 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:37,764 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:37,764 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:37,764 INFO L748 eck$LassoCheckResult]: Stem: 381420#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 381421#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 383140#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 383048#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 381816#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 381392#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 381059#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 381060#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 382310#L467 assume !(0 == getOrigin_~person#1); 381548#L471 assume !(1 == getOrigin_~person#1); 381549#L475 assume !(2 == getOrigin_~person#1); 381250#L479 assume !(3 == getOrigin_~person#1); 381251#L483 assume !(4 == getOrigin_~person#1); 381380#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 382339#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 382755#L3068 assume !(0 == initPersonOnFloor_~floor#1); 381366#L3095 assume 1 == initPersonOnFloor_~floor#1; 381367#L3096 assume !(0 == initPersonOnFloor_~person#1); 383100#L3099 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 379544#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 381509#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 381046#L2872-2 assume { :end_inline_callOnFloor } true; 383231#L3212 assume { :end_inline_initPersonOnFloor } true; 381890#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 381891#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 382510#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 382511#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 380193#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 380195#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 383545#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 383546#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 383368#L1966 assume !(0 != timeShift_~tmp___9~2#1); 383369#L2057 assume !(1 == ~doorState~0); 385075#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 391418#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 391417#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 391416#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 391414#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 385318#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 385316#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 385317#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 391225#L1753 assume !(1 == ~currentHeading~0); 382524#L1763 assume !(0 == ~currentFloorID~0); 382525#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 383015#L1769-1 assume { :end_inline_continueInDirection } true; 380935#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 380936#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 381177#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 381178#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 379786#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 379787#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 379659#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 381663#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 382354#L207-2 assume !false; 397611#L208 [2022-11-25 18:35:37,765 INFO L750 eck$LassoCheckResult]: Loop: 397611#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 408598#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 408597#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 408596#L215 assume 1 != cleanup_~tmp___0~0#1; 408595#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 408594#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 408593#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 407487#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 407477#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 407475#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 407474#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 407472#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 400263#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 407468#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 407466#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 407439#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 407424#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 407413#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 407406#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 407403#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 407398#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 407399#L1968-2 assume !(0 != ~persons_0~0); 409203#L1968-3 assume !(0 != ~persons_1~0); 409197#L1982-1 assume !(0 != ~persons_2~0); 409172#L1996-1 assume !(0 != ~persons_3~0); 409167#L2010-1 assume !(0 != ~persons_4~0); 409162#L2024-1 assume !(0 != ~persons_5~0); 409158#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 409156#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 409074#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 409057#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 409055#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 409053#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 409052#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 409031#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 409011#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 409009#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 409007#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 409006#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 408987#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 408964#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 408962#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 408960#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 408959#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 408945#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 408918#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 408916#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 408914#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 408913#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 408903#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 408877#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 408691#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 408689#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 408683#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 408675#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 408640#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 408638#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 408636#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 408635#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 408630#L2844-41 assume { :end_inline_resetCallOnFloor } true; 408629#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 408612#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 408608#L1127-5 assume { :end_inline_resetFloorButton } true; 408607#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 408606#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 408605#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 408604#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 407610#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 408603#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 407583#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 408600#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 408599#L207-2 assume !false; 397611#L208 [2022-11-25 18:35:37,766 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:37,766 INFO L85 PathProgramCache]: Analyzing trace with hash -1651182822, now seen corresponding path program 1 times [2022-11-25 18:35:37,766 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:37,766 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1813394136] [2022-11-25 18:35:37,766 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:37,766 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:37,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:37,857 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:37,857 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:37,857 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1813394136] [2022-11-25 18:35:37,858 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1813394136] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:37,858 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:37,858 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:37,858 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137346366] [2022-11-25 18:35:37,858 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:37,859 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:37,859 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:37,859 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 3 times [2022-11-25 18:35:37,859 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:37,859 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1380300561] [2022-11-25 18:35:37,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:37,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:37,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:37,967 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:37,967 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:37,968 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1380300561] [2022-11-25 18:35:37,968 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1380300561] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:37,968 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:37,968 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:37,968 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1091977298] [2022-11-25 18:35:37,968 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:37,969 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:37,969 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:37,969 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:37,969 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:37,970 INFO L87 Difference]: Start difference. First operand 39517 states and 73111 transitions. cyclomatic complexity: 33603 Second operand has 4 states, 4 states have (on average 13.5) internal successors, (54), 4 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:38,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:38,206 INFO L93 Difference]: Finished difference Result 39517 states and 73107 transitions. [2022-11-25 18:35:38,206 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73107 transitions. [2022-11-25 18:35:38,572 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:38,685 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73107 transitions. [2022-11-25 18:35:38,685 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2022-11-25 18:35:38,708 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2022-11-25 18:35:38,708 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73107 transitions. [2022-11-25 18:35:38,710 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:38,711 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2022-11-25 18:35:38,740 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73107 transitions. [2022-11-25 18:35:39,288 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2022-11-25 18:35:39,326 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8500139180605815) internal successors, (73107), 39516 states have internal predecessors, (73107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:39,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73107 transitions. [2022-11-25 18:35:39,442 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2022-11-25 18:35:39,443 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:39,445 INFO L428 stractBuchiCegarLoop]: Abstraction has 39517 states and 73107 transitions. [2022-11-25 18:35:39,446 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-11-25 18:35:39,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73107 transitions. [2022-11-25 18:35:39,601 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:39,601 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:39,601 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:39,604 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:39,604 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:39,605 INFO L748 eck$LassoCheckResult]: Stem: 460480#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 460481#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 462228#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 462130#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 460877#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 460452#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 460117#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 460118#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 461378#L467 assume !(0 == getOrigin_~person#1); 460606#L471 assume !(1 == getOrigin_~person#1); 460607#L475 assume !(2 == getOrigin_~person#1); 460310#L479 assume !(3 == getOrigin_~person#1); 460311#L483 assume !(4 == getOrigin_~person#1); 460440#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 461406#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 461826#L3068 assume !(0 == initPersonOnFloor_~floor#1); 460426#L3095 assume 1 == initPersonOnFloor_~floor#1; 460427#L3096 assume !(0 == initPersonOnFloor_~person#1); 462185#L3099 assume !(1 == initPersonOnFloor_~person#1); 459926#L3102 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 458593#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 460568#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 460104#L2872-2 assume { :end_inline_callOnFloor } true; 462324#L3212 assume { :end_inline_initPersonOnFloor } true; 460951#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 460952#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 461576#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 461577#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 459246#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 459248#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 462668#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 462669#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 462468#L1966 assume !(0 != timeShift_~tmp___9~2#1); 462469#L2057 assume !(1 == ~doorState~0); 464209#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 471120#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 471119#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 471118#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 471116#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 464452#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 464451#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 464448#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 464450#L1753 assume !(1 == ~currentHeading~0); 470884#L1763 assume !(0 == ~currentFloorID~0); 462679#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 470288#L1769-1 assume { :end_inline_continueInDirection } true; 476606#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 476605#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 476604#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 476602#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 476603#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 476570#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 476566#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 476564#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 476562#L207-2 assume !false; 476563#L208 [2022-11-25 18:35:39,605 INFO L750 eck$LassoCheckResult]: Loop: 476563#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 487348#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 487347#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 487346#L215 assume 1 != cleanup_~tmp___0~0#1; 487345#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 487344#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 487343#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 487325#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 487320#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 487319#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 487318#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 487317#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 478980#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 487316#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 487314#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 487315#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 489440#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 489432#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 489431#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 489429#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 489389#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 489385#L1968-2 assume !(0 != ~persons_0~0); 489376#L1968-3 assume !(0 != ~persons_1~0); 489370#L1982-1 assume !(0 != ~persons_2~0); 489345#L1996-1 assume !(0 != ~persons_3~0); 489340#L2010-1 assume !(0 != ~persons_4~0); 489335#L2024-1 assume !(0 != ~persons_5~0); 489331#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 489330#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 489305#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 489288#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 489286#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 489284#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 489283#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 489263#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 489243#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 489241#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 489239#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 489238#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 487766#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487743#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 487741#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 487739#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 487738#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 487723#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487696#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 487694#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 487692#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 487691#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 487681#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487655#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 487425#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 487423#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 487422#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 487416#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 487381#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 487379#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 487377#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 487376#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 487371#L2844-41 assume { :end_inline_resetCallOnFloor } true; 487370#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 487362#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 487358#L1127-5 assume { :end_inline_resetFloorButton } true; 487357#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 487356#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 487355#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 487354#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 486706#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 487353#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 486676#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 487350#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 487349#L207-2 assume !false; 476563#L208 [2022-11-25 18:35:39,606 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:39,606 INFO L85 PathProgramCache]: Analyzing trace with hash -1722085675, now seen corresponding path program 1 times [2022-11-25 18:35:39,606 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:39,607 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694989757] [2022-11-25 18:35:39,607 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:39,607 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:39,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:39,707 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:39,708 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:39,708 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694989757] [2022-11-25 18:35:39,708 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694989757] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:39,708 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:39,709 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:39,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1601271806] [2022-11-25 18:35:39,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:39,709 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:39,719 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:39,720 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 4 times [2022-11-25 18:35:39,721 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:39,721 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841641080] [2022-11-25 18:35:39,721 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:39,721 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:39,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:39,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:39,851 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:39,851 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841641080] [2022-11-25 18:35:39,851 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [841641080] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:39,851 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:39,852 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:39,854 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1734774529] [2022-11-25 18:35:39,854 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:39,854 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:39,855 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:39,855 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:39,855 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:39,856 INFO L87 Difference]: Start difference. First operand 39517 states and 73107 transitions. cyclomatic complexity: 33599 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:40,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:40,129 INFO L93 Difference]: Finished difference Result 39517 states and 73103 transitions. [2022-11-25 18:35:40,129 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39517 states and 73103 transitions. [2022-11-25 18:35:40,487 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:40,567 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39517 states to 39517 states and 73103 transitions. [2022-11-25 18:35:40,567 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26423 [2022-11-25 18:35:40,588 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26423 [2022-11-25 18:35:40,588 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39517 states and 73103 transitions. [2022-11-25 18:35:40,588 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:40,588 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2022-11-25 18:35:40,618 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39517 states and 73103 transitions. [2022-11-25 18:35:41,198 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39517 to 39517. [2022-11-25 18:35:41,221 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39517 states, 39517 states have (on average 1.8499126958018068) internal successors, (73103), 39516 states have internal predecessors, (73103), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:41,289 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39517 states to 39517 states and 73103 transitions. [2022-11-25 18:35:41,289 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2022-11-25 18:35:41,290 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:41,290 INFO L428 stractBuchiCegarLoop]: Abstraction has 39517 states and 73103 transitions. [2022-11-25 18:35:41,291 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-11-25 18:35:41,291 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39517 states and 73103 transitions. [2022-11-25 18:35:41,370 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:41,370 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:41,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:41,372 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:41,372 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:41,372 INFO L748 eck$LassoCheckResult]: Stem: 539518#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 539519#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 541239#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 541150#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 539914#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 539492#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 539160#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 539161#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 540409#L467 assume !(0 == getOrigin_~person#1); 539645#L471 assume !(1 == getOrigin_~person#1); 539646#L475 assume !(2 == getOrigin_~person#1); 539353#L479 assume !(3 == getOrigin_~person#1); 539354#L483 assume !(4 == getOrigin_~person#1); 539482#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 540438#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 540848#L3068 assume !(0 == initPersonOnFloor_~floor#1); 539466#L3095 assume !(1 == initPersonOnFloor_~floor#1); 539468#L3122 assume !(2 == initPersonOnFloor_~floor#1); 540729#L3149 assume !(3 == initPersonOnFloor_~floor#1); 541603#L3176 assume !(4 == initPersonOnFloor_~floor#1); 537648#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 539605#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 539151#L2872-2 assume { :end_inline_callOnFloor } true; 541333#L3212 assume { :end_inline_initPersonOnFloor } true; 539990#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 539991#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 540605#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 540606#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 538300#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 538302#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 541639#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 541579#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 541580#L1966 assume !(0 != timeShift_~tmp___9~2#1); 541338#L2057 assume !(1 == ~doorState~0); 541339#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 549403#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 549402#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 549401#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 549400#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 549399#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 549398#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 549397#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 538323#L1753 assume !(1 == ~currentHeading~0); 538324#L1763 assume !(0 == ~currentFloorID~0); 549335#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 549333#L1769-1 assume { :end_inline_continueInDirection } true; 554226#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 554225#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 554224#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 554222#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 554223#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 554194#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 554190#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 554188#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 554186#L207-2 assume !false; 554187#L208 [2022-11-25 18:35:41,373 INFO L750 eck$LassoCheckResult]: Loop: 554187#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 565546#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 565545#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 565540#L215 assume 1 != cleanup_~tmp___0~0#1; 565524#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565513#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 565499#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 565488#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 565479#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 565477#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 565475#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565471#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 558316#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 565470#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 565469#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 565446#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 565430#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 565419#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 565413#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 565410#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 565406#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 565407#L1968-2 assume !(0 != ~persons_0~0); 571294#L1968-3 assume !(0 != ~persons_1~0); 571288#L1982-1 assume !(0 != ~persons_2~0); 571263#L1996-1 assume !(0 != ~persons_3~0); 571258#L2010-1 assume !(0 != ~persons_4~0); 571253#L2024-1 assume !(0 != ~persons_5~0); 571249#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571248#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 571223#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 571206#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 571204#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 571202#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571201#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 571181#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 571161#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 571159#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 571157#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571156#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 571137#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 571114#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 571112#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 571110#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571109#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 571094#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 571067#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 571065#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 571063#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571062#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 571052#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 571026#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 571017#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 571016#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 571015#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 571009#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 570974#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 570972#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 570970#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 570969#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 570964#L2844-41 assume { :end_inline_resetCallOnFloor } true; 570963#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 570958#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 565628#L1127-5 assume { :end_inline_resetFloorButton } true; 565619#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 565612#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 565600#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 565598#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 565592#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 565581#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 565570#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 565568#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 565566#L207-2 assume !false; 554187#L208 [2022-11-25 18:35:41,374 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:41,374 INFO L85 PathProgramCache]: Analyzing trace with hash 1107673685, now seen corresponding path program 1 times [2022-11-25 18:35:41,374 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:41,374 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849741044] [2022-11-25 18:35:41,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:41,375 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:41,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:41,450 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:41,450 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:41,450 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849741044] [2022-11-25 18:35:41,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849741044] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:41,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:41,451 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:41,451 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [295617939] [2022-11-25 18:35:41,451 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:41,451 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:41,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:41,452 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 5 times [2022-11-25 18:35:41,452 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:41,452 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1263244363] [2022-11-25 18:35:41,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:41,453 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:41,460 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:41,546 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:41,546 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:41,547 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1263244363] [2022-11-25 18:35:41,547 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1263244363] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:41,547 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:41,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:41,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1562392186] [2022-11-25 18:35:41,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:41,548 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:41,548 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:41,548 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:41,548 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:41,549 INFO L87 Difference]: Start difference. First operand 39517 states and 73103 transitions. cyclomatic complexity: 33595 Second operand has 4 states, 4 states have (on average 13.75) internal successors, (55), 4 states have internal predecessors, (55), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:41,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:41,725 INFO L93 Difference]: Finished difference Result 39496 states and 73069 transitions. [2022-11-25 18:35:41,725 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73069 transitions. [2022-11-25 18:35:41,903 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:42,486 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73069 transitions. [2022-11-25 18:35:42,486 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2022-11-25 18:35:42,508 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2022-11-25 18:35:42,508 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73069 transitions. [2022-11-25 18:35:42,508 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:42,509 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2022-11-25 18:35:42,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73069 transitions. [2022-11-25 18:35:42,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2022-11-25 18:35:42,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8500354466275066) internal successors, (73069), 39495 states have internal predecessors, (73069), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:42,927 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73069 transitions. [2022-11-25 18:35:42,927 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2022-11-25 18:35:42,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:42,928 INFO L428 stractBuchiCegarLoop]: Abstraction has 39496 states and 73069 transitions. [2022-11-25 18:35:42,928 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-11-25 18:35:42,928 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73069 transitions. [2022-11-25 18:35:43,311 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:43,312 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:43,312 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:43,313 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:43,313 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:43,314 INFO L748 eck$LassoCheckResult]: Stem: 618548#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 618549#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 620300#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 620202#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 618942#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 618516#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 618181#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 618182#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 619451#L467 assume !(0 == getOrigin_~person#1); 618674#L471 assume !(1 == getOrigin_~person#1); 618675#L475 assume !(2 == getOrigin_~person#1); 618376#L479 assume !(3 == getOrigin_~person#1); 618377#L483 assume !(4 == getOrigin_~person#1); 618506#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 619481#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 619893#L3068 assume !(0 == initPersonOnFloor_~floor#1); 618490#L3095 assume 1 == initPersonOnFloor_~floor#1; 618491#L3096 assume !(0 == initPersonOnFloor_~person#1); 620256#L3099 assume !(1 == initPersonOnFloor_~person#1); 617993#L3102 assume !(2 == initPersonOnFloor_~person#1); 617994#L3105 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 619820#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 618636#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 618172#L2872-2 assume { :end_inline_callOnFloor } true; 620399#L3212 assume { :end_inline_initPersonOnFloor } true; 619019#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 619020#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 619736#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 620759#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 620757#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620756#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 620733#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 620734#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 620535#L1966 assume !(0 != timeShift_~tmp___9~2#1); 620536#L2057 assume !(1 == ~doorState~0); 620976#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 627800#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 627799#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 627798#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 627797#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 620087#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 617452#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 619826#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 617346#L1753 assume !(1 == ~currentHeading~0); 617347#L1763 assume !(0 == ~currentFloorID~0); 619662#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 628416#L1769-1 assume { :end_inline_continueInDirection } true; 621415#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 621416#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 621405#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 621406#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 616910#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 616911#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 631612#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 634753#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 634751#L207-2 assume !false; 634752#L208 [2022-11-25 18:35:43,314 INFO L750 eck$LassoCheckResult]: Loop: 634752#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 644689#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 644687#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 644685#L215 assume 1 != cleanup_~tmp___0~0#1; 644684#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 644652#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 644621#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 644622#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 645358#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 645357#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 645356#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645355#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 638917#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 645354#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 645352#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 645353#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 645773#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 645765#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 645764#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 645762#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 645761#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 644529#L1968-2 assume !(0 != ~persons_0~0); 653791#L1968-3 assume !(0 != ~persons_1~0); 653785#L1982-1 assume !(0 != ~persons_2~0); 653771#L1996-1 assume !(0 != ~persons_3~0); 653767#L2010-1 assume !(0 != ~persons_4~0); 653757#L2024-1 assume !(0 != ~persons_5~0); 653752#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653751#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 653726#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 653709#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 653707#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 653705#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653704#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 653684#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 653664#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 653662#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 653660#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653659#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 653640#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 653617#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 653615#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 653613#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653612#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 653597#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 653570#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 653568#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 653566#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653565#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 653556#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 653525#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 653517#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 653500#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 653476#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 649585#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 646312#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 646310#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 646308#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 646306#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 646300#L2844-41 assume { :end_inline_resetCallOnFloor } true; 646298#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 646293#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 644749#L1127-5 assume { :end_inline_resetFloorButton } true; 644746#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 644743#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 644738#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 644726#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 644727#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 644706#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 644695#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 644694#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 644692#L207-2 assume !false; 634752#L208 [2022-11-25 18:35:43,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:43,315 INFO L85 PathProgramCache]: Analyzing trace with hash 1536459861, now seen corresponding path program 1 times [2022-11-25 18:35:43,316 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:43,316 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1302595088] [2022-11-25 18:35:43,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:43,316 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:43,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:43,416 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:43,416 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:43,416 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1302595088] [2022-11-25 18:35:43,417 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1302595088] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:43,417 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:43,417 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:43,417 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1389773801] [2022-11-25 18:35:43,417 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:43,418 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:43,418 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:43,418 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 6 times [2022-11-25 18:35:43,419 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:43,419 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747935851] [2022-11-25 18:35:43,419 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:43,419 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:43,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:43,530 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:43,530 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:43,530 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747935851] [2022-11-25 18:35:43,531 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747935851] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:43,531 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:43,531 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:43,531 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1063971187] [2022-11-25 18:35:43,531 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:43,532 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:43,532 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:43,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:43,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:43,533 INFO L87 Difference]: Start difference. First operand 39496 states and 73069 transitions. cyclomatic complexity: 33582 Second operand has 4 states, 4 states have (on average 14.0) internal successors, (56), 4 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:43,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:43,781 INFO L93 Difference]: Finished difference Result 39496 states and 73068 transitions. [2022-11-25 18:35:43,782 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73068 transitions. [2022-11-25 18:35:44,008 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:44,160 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73068 transitions. [2022-11-25 18:35:44,161 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2022-11-25 18:35:44,187 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2022-11-25 18:35:44,187 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73068 transitions. [2022-11-25 18:35:44,190 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:44,190 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2022-11-25 18:35:44,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73068 transitions. [2022-11-25 18:35:45,059 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2022-11-25 18:35:45,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.850010127607859) internal successors, (73068), 39495 states have internal predecessors, (73068), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:45,180 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73068 transitions. [2022-11-25 18:35:45,181 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2022-11-25 18:35:45,181 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:45,181 INFO L428 stractBuchiCegarLoop]: Abstraction has 39496 states and 73068 transitions. [2022-11-25 18:35:45,182 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-11-25 18:35:45,182 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73068 transitions. [2022-11-25 18:35:45,263 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:45,264 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:45,264 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:45,266 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:45,266 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:45,266 INFO L748 eck$LassoCheckResult]: Stem: 697547#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 697548#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 699304#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 699202#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 697944#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 697521#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 697194#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 697195#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 698442#L467 assume !(0 == getOrigin_~person#1); 697676#L471 assume !(1 == getOrigin_~person#1); 697677#L475 assume !(2 == getOrigin_~person#1); 697380#L479 assume !(3 == getOrigin_~person#1); 697381#L483 assume !(4 == getOrigin_~person#1); 697509#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 698472#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 698896#L3068 assume !(0 == initPersonOnFloor_~floor#1); 697496#L3095 assume 1 == initPersonOnFloor_~floor#1; 697497#L3096 assume !(0 == initPersonOnFloor_~person#1); 699259#L3099 assume !(1 == initPersonOnFloor_~person#1); 697002#L3102 assume !(2 == initPersonOnFloor_~person#1); 697003#L3105 assume !(3 == initPersonOnFloor_~person#1); 699488#L3108 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 698816#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 697637#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 697181#L2872-2 assume { :end_inline_callOnFloor } true; 699406#L3212 assume { :end_inline_initPersonOnFloor } true; 698018#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 698019#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 698730#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 699757#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 699755#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 699754#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 699737#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 699738#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 699546#L1966 assume !(0 != timeShift_~tmp___9~2#1); 699547#L2057 assume !(1 == ~doorState~0); 699986#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 707520#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 707519#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 707518#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 699655#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 699656#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 701577#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 698897#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 698899#L1753 assume !(1 == ~currentHeading~0); 707390#L1763 assume !(0 == ~currentFloorID~0); 699381#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 699382#L1769-1 assume { :end_inline_continueInDirection } true; 697064#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 697065#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 699112#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 699218#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 699219#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 713922#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 713923#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 714193#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 714191#L207-2 assume !false; 714192#L208 [2022-11-25 18:35:45,267 INFO L750 eck$LassoCheckResult]: Loop: 714192#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 733347#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 733346#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 733345#L215 assume 1 != cleanup_~tmp___0~0#1; 733340#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 733335#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 733324#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 733316#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 733307#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 733306#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 733305#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 733304#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 715813#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 733303#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 733300#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 733301#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 734546#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 734541#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 734537#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 730033#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 724615#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 724616#L1968-2 assume !(0 != ~persons_0~0); 732593#L1968-3 assume !(0 != ~persons_1~0); 732587#L1982-1 assume !(0 != ~persons_2~0); 732504#L1996-1 assume !(0 != ~persons_3~0); 732499#L2010-1 assume !(0 != ~persons_4~0); 732494#L2024-1 assume !(0 != ~persons_5~0); 732490#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732489#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 732464#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732447#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 732445#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 732443#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732442#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 732420#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732400#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 732398#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 732396#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732395#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 732376#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732353#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 732351#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 732349#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732348#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 732334#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732307#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 732305#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 732303#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732302#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 732292#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 732266#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 732257#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 732250#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 732249#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 732117#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 731833#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 731817#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 731806#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 731100#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 731094#L2844-41 assume { :end_inline_resetCallOnFloor } true; 731092#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 731088#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 730999#L1127-5 assume { :end_inline_resetFloorButton } true; 730998#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 730997#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 730996#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 699445#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 699446#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 698411#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 696104#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 733349#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 733348#L207-2 assume !false; 714192#L208 [2022-11-25 18:35:45,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:45,267 INFO L85 PathProgramCache]: Analyzing trace with hash 633723056, now seen corresponding path program 1 times [2022-11-25 18:35:45,268 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:45,268 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1560411477] [2022-11-25 18:35:45,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:45,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:45,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:45,339 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:45,339 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:45,339 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1560411477] [2022-11-25 18:35:45,339 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1560411477] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:45,339 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:45,340 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:45,340 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730508185] [2022-11-25 18:35:45,340 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:45,340 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:45,341 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:45,341 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 7 times [2022-11-25 18:35:45,341 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:45,341 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464387742] [2022-11-25 18:35:45,341 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:45,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:45,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:45,433 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:45,433 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:45,434 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1464387742] [2022-11-25 18:35:45,434 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1464387742] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:45,434 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:45,434 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:45,434 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574745921] [2022-11-25 18:35:45,434 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:45,435 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:45,435 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:45,435 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:45,436 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:45,436 INFO L87 Difference]: Start difference. First operand 39496 states and 73068 transitions. cyclomatic complexity: 33581 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:45,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:45,580 INFO L93 Difference]: Finished difference Result 39496 states and 73067 transitions. [2022-11-25 18:35:45,580 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73067 transitions. [2022-11-25 18:35:45,705 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:45,794 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73067 transitions. [2022-11-25 18:35:45,794 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2022-11-25 18:35:45,816 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2022-11-25 18:35:45,816 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73067 transitions. [2022-11-25 18:35:45,818 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:45,819 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2022-11-25 18:35:45,843 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73067 transitions. [2022-11-25 18:35:46,682 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2022-11-25 18:35:46,716 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499848085882116) internal successors, (73067), 39495 states have internal predecessors, (73067), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:46,773 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73067 transitions. [2022-11-25 18:35:46,774 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2022-11-25 18:35:46,774 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:46,774 INFO L428 stractBuchiCegarLoop]: Abstraction has 39496 states and 73067 transitions. [2022-11-25 18:35:46,775 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-11-25 18:35:46,775 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73067 transitions. [2022-11-25 18:35:46,858 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:46,858 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:46,858 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:46,860 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:46,860 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:46,860 INFO L748 eck$LassoCheckResult]: Stem: 776544#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 776545#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 778257#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 778169#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 776936#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 776518#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 776190#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 776191#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 777426#L467 assume !(0 == getOrigin_~person#1); 776671#L471 assume !(1 == getOrigin_~person#1); 776672#L475 assume !(2 == getOrigin_~person#1); 776379#L479 assume !(3 == getOrigin_~person#1); 776380#L483 assume !(4 == getOrigin_~person#1); 776506#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 777455#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 777871#L3068 assume !(0 == initPersonOnFloor_~floor#1); 776493#L3095 assume 1 == initPersonOnFloor_~floor#1; 776494#L3096 assume !(0 == initPersonOnFloor_~person#1); 778215#L3099 assume !(1 == initPersonOnFloor_~person#1); 776008#L3102 assume !(2 == initPersonOnFloor_~person#1); 776009#L3105 assume !(3 == initPersonOnFloor_~person#1); 778426#L3108 assume !(4 == initPersonOnFloor_~person#1); 778480#L3111 assume !(5 == initPersonOnFloor_~person#1); 777792#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 776632#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 776177#L2872-2 assume { :end_inline_callOnFloor } true; 778349#L3212 assume { :end_inline_initPersonOnFloor } true; 777011#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 777012#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 777711#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 778680#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 778678#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 778677#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 778649#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 778650#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 778483#L1966 assume !(0 != timeShift_~tmp___9~2#1); 778485#L2057 assume !(1 == ~doorState~0); 778907#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 787929#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 787928#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 787927#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 778579#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 778580#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 786534#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 786532#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 786531#L1753 assume !(1 == ~currentHeading~0); 777633#L1763 assume !(0 == ~currentFloorID~0); 777634#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 786527#L1769-1 assume { :end_inline_continueInDirection } true; 788591#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 788590#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 788589#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 788587#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 788588#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 788553#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 788549#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 788547#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 788545#L207-2 assume !false; 788546#L208 [2022-11-25 18:35:46,861 INFO L750 eck$LassoCheckResult]: Loop: 788546#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 804274#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 804273#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 804272#L215 assume 1 != cleanup_~tmp___0~0#1; 804271#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 804270#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 804269#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 803745#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 803737#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 803736#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 803735#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 803734#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 796569#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 803733#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 803732#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 803731#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 803726#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 803716#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 803715#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 803714#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 803043#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 803044#L1968-2 assume !(0 != ~persons_0~0); 808017#L1968-3 assume !(0 != ~persons_1~0); 808011#L1982-1 assume !(0 != ~persons_2~0); 808004#L1996-1 assume !(0 != ~persons_3~0); 807623#L2010-1 assume !(0 != ~persons_4~0); 807618#L2024-1 assume !(0 != ~persons_5~0); 807609#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 807607#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 807580#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 807562#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 806556#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 804546#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804545#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 804517#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804497#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 804495#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 804493#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804492#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 804470#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804447#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 804445#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 804443#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804442#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 804427#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804400#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 804398#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 804396#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804395#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 804385#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804359#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 804350#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 804349#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 804348#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 804342#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 804307#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 804305#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 804303#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 804302#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 804297#L2844-41 assume { :end_inline_resetCallOnFloor } true; 804296#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 804291#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 804287#L1127-5 assume { :end_inline_resetFloorButton } true; 804286#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 804285#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 804284#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 804283#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 803374#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 804282#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 803135#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 804276#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 804275#L207-2 assume !false; 788546#L208 [2022-11-25 18:35:46,862 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:46,862 INFO L85 PathProgramCache]: Analyzing trace with hash -814114226, now seen corresponding path program 1 times [2022-11-25 18:35:46,862 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:46,862 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998328050] [2022-11-25 18:35:46,863 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:46,863 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:46,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:46,973 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:46,973 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:46,973 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998328050] [2022-11-25 18:35:46,973 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998328050] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:46,974 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:46,974 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:46,974 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1442502009] [2022-11-25 18:35:46,974 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:46,974 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:46,974 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:46,975 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 8 times [2022-11-25 18:35:46,975 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:46,975 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [73363564] [2022-11-25 18:35:46,975 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:46,975 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:46,983 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:47,077 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:47,078 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:47,078 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [73363564] [2022-11-25 18:35:47,078 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [73363564] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:47,078 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:47,078 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:47,079 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [216737426] [2022-11-25 18:35:47,079 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:47,079 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:47,079 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:47,079 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:35:47,080 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:35:47,080 INFO L87 Difference]: Start difference. First operand 39496 states and 73067 transitions. cyclomatic complexity: 33580 Second operand has 3 states, 3 states have (on average 19.333333333333332) internal successors, (58), 3 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:47,237 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:47,237 INFO L93 Difference]: Finished difference Result 39496 states and 73066 transitions. [2022-11-25 18:35:47,238 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73066 transitions. [2022-11-25 18:35:47,362 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:47,448 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73066 transitions. [2022-11-25 18:35:47,449 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2022-11-25 18:35:47,465 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2022-11-25 18:35:47,465 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73066 transitions. [2022-11-25 18:35:47,470 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:47,470 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2022-11-25 18:35:47,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73066 transitions. [2022-11-25 18:35:48,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2022-11-25 18:35:48,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499594895685638) internal successors, (73066), 39495 states have internal predecessors, (73066), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:48,366 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73066 transitions. [2022-11-25 18:35:48,366 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2022-11-25 18:35:48,366 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:35:48,367 INFO L428 stractBuchiCegarLoop]: Abstraction has 39496 states and 73066 transitions. [2022-11-25 18:35:48,367 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-11-25 18:35:48,367 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73066 transitions. [2022-11-25 18:35:48,456 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:48,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:48,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:48,457 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:48,457 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:48,457 INFO L748 eck$LassoCheckResult]: Stem: 855561#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 855562#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 857297#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 857203#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 855959#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 855533#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 855199#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 855200#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 856461#L467 assume !(0 == getOrigin_~person#1); 855689#L471 assume !(1 == getOrigin_~person#1); 855690#L475 assume !(2 == getOrigin_~person#1); 855395#L479 assume !(3 == getOrigin_~person#1); 855396#L483 assume !(4 == getOrigin_~person#1); 855521#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 856489#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 856909#L3068 assume !(0 == initPersonOnFloor_~floor#1); 855508#L3095 assume 1 == initPersonOnFloor_~floor#1; 855509#L3096 assume !(0 == initPersonOnFloor_~person#1); 857256#L3099 assume !(1 == initPersonOnFloor_~person#1); 855014#L3102 assume !(2 == initPersonOnFloor_~person#1); 855015#L3105 assume !(3 == initPersonOnFloor_~person#1); 857478#L3108 assume !(4 == initPersonOnFloor_~person#1); 857532#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 856833#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 855649#L2860 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 855190#L2872-2 assume { :end_inline_callOnFloor } true; 857402#L3212 assume { :end_inline_initPersonOnFloor } true; 856038#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 856039#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 856749#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 857753#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 857751#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857750#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 857727#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 857728#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 857533#L1966 assume !(0 != timeShift_~tmp___9~2#1); 857535#L2057 assume !(1 == ~doorState~0); 857975#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 857974#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 854191#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 854192#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 857642#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 857093#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 854471#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 856840#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 854364#L1753 assume !(1 == ~currentHeading~0); 854365#L1763 assume !(0 == ~currentFloorID~0); 857378#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 857379#L1769-1 assume { :end_inline_continueInDirection } true; 871885#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 871882#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 871881#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 871879#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 871878#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 871874#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 855806#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 855807#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 856504#L207-2 assume !false; 872015#L208 [2022-11-25 18:35:48,458 INFO L750 eck$LassoCheckResult]: Loop: 872015#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 884566#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 884565#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 884564#L215 assume 1 != cleanup_~tmp___0~0#1; 884563#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 884558#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 884556#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 884540#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 884531#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 884530#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 884529#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 884528#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 876029#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 884527#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 884525#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 884524#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 884519#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 884511#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 884510#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 884508#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 884507#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 884352#L1968-2 assume !(0 != ~persons_0~0); 886259#L1968-3 assume !(0 != ~persons_1~0); 886246#L1982-1 assume !(0 != ~persons_2~0); 886239#L1996-1 assume !(0 != ~persons_3~0); 886192#L2010-1 assume !(0 != ~persons_4~0); 886156#L2024-1 assume !(0 != ~persons_5~0); 886151#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 886145#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 886036#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 886019#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 886017#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 886015#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 886014#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 885994#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 885974#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 885972#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 885970#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 885969#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 885950#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 885927#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 885925#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 885923#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 885922#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 885907#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 885886#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 885884#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 885882#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 885881#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 885853#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 885822#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 885800#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 885793#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 885791#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 884649#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 884614#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 884612#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 884610#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 884609#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 884604#L2844-41 assume { :end_inline_resetCallOnFloor } true; 884603#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 884601#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 884597#L1127-5 assume { :end_inline_resetFloorButton } true; 884596#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 884595#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 884594#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 884588#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 884586#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 884584#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 884570#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 884568#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 884567#L207-2 assume !false; 872015#L208 [2022-11-25 18:35:48,458 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:48,458 INFO L85 PathProgramCache]: Analyzing trace with hash -419747440, now seen corresponding path program 1 times [2022-11-25 18:35:48,458 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:48,459 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1494192693] [2022-11-25 18:35:48,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:48,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:48,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:48,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:48,579 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:48,579 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1494192693] [2022-11-25 18:35:48,580 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1494192693] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:48,580 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:48,580 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:35:48,580 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [740889292] [2022-11-25 18:35:48,580 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:48,581 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:48,581 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:48,581 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 9 times [2022-11-25 18:35:48,581 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:48,581 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2036783281] [2022-11-25 18:35:48,582 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:48,582 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:48,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:48,666 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:48,667 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:48,667 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2036783281] [2022-11-25 18:35:48,667 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2036783281] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:48,667 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:48,667 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:48,668 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1470482250] [2022-11-25 18:35:48,668 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:48,668 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:48,668 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:48,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-11-25 18:35:48,669 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-11-25 18:35:48,669 INFO L87 Difference]: Start difference. First operand 39496 states and 73066 transitions. cyclomatic complexity: 33579 Second operand has 7 states, 7 states have (on average 8.285714285714286) internal successors, (58), 7 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:48,930 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:48,931 INFO L93 Difference]: Finished difference Result 39496 states and 73065 transitions. [2022-11-25 18:35:48,931 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39496 states and 73065 transitions. [2022-11-25 18:35:49,593 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:49,738 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39496 states to 39496 states and 73065 transitions. [2022-11-25 18:35:49,739 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26402 [2022-11-25 18:35:49,763 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26402 [2022-11-25 18:35:49,763 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39496 states and 73065 transitions. [2022-11-25 18:35:49,764 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:49,764 INFO L218 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2022-11-25 18:35:49,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39496 states and 73065 transitions. [2022-11-25 18:35:50,244 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39496 to 39496. [2022-11-25 18:35:50,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39496 states, 39496 states have (on average 1.8499341705489163) internal successors, (73065), 39495 states have internal predecessors, (73065), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:50,351 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39496 states to 39496 states and 73065 transitions. [2022-11-25 18:35:50,352 INFO L240 hiAutomatonCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2022-11-25 18:35:50,352 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-11-25 18:35:50,352 INFO L428 stractBuchiCegarLoop]: Abstraction has 39496 states and 73065 transitions. [2022-11-25 18:35:50,353 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-11-25 18:35:50,353 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39496 states and 73065 transitions. [2022-11-25 18:35:50,465 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 20175 [2022-11-25 18:35:50,465 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:50,465 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:50,466 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:50,467 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:50,467 INFO L748 eck$LassoCheckResult]: Stem: 934574#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 934575#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 936302#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 936210#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 934964#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 934545#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 934217#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 934218#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 935466#L467 assume !(0 == getOrigin_~person#1); 934698#L471 assume !(1 == getOrigin_~person#1); 934699#L475 assume !(2 == getOrigin_~person#1); 934409#L479 assume !(3 == getOrigin_~person#1); 934410#L483 assume !(4 == getOrigin_~person#1); 934535#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 935491#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 935897#L3068 assume !(0 == initPersonOnFloor_~floor#1); 934520#L3095 assume 1 == initPersonOnFloor_~floor#1; 934521#L3096 assume !(0 == initPersonOnFloor_~person#1); 936262#L3099 assume !(1 == initPersonOnFloor_~person#1); 934029#L3102 assume !(2 == initPersonOnFloor_~person#1); 934030#L3105 assume !(3 == initPersonOnFloor_~person#1); 936476#L3108 assume !(4 == initPersonOnFloor_~person#1); 936531#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 935826#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 934659#L2860 assume !(0 == callOnFloor_~floorID#1); 934660#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 934208#L2872-2 assume { :end_inline_callOnFloor } true; 936402#L3212 assume { :end_inline_initPersonOnFloor } true; 935039#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 935040#L2797 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 935739#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 936746#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 936744#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 936743#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 936720#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 936721#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 936532#L1966 assume !(0 != timeShift_~tmp___9~2#1); 936534#L2057 assume !(1 == ~doorState~0); 936972#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 936971#L2797-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 933209#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 933210#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 936647#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 936648#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 944355#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 944354#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 944255#L1753 assume !(1 == ~currentHeading~0); 935671#L1763 assume !(0 == ~currentFloorID~0); 935672#L1763-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 936179#L1769-1 assume { :end_inline_continueInDirection } true; 936180#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 936116#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 936117#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 936225#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 936226#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 947118#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 932817#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 935504#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 935505#L207-2 assume !false; 950691#L208 [2022-11-25 18:35:50,467 INFO L750 eck$LassoCheckResult]: Loop: 950691#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 961331#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 961328#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 961324#L215 assume 1 != cleanup_~tmp___0~0#1; 961323#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 961317#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 961313#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 961314#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 961799#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 961798#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 961797#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 961796#L2797-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 954862#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 961795#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 961793#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 961792#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 961787#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 961677#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 961676#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 961674#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 961673#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 933473#L1968-2 assume !(0 != ~persons_0~0); 933475#L1968-3 assume !(0 != ~persons_1~0); 933195#L1982-1 assume !(0 != ~persons_2~0); 933746#L1996-1 assume !(0 != ~persons_3~0); 934144#L2010-1 assume !(0 != ~persons_4~0); 934422#L2024-1 assume !(0 != ~persons_5~0); 933150#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 935550#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 934232#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 932765#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 934465#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 934466#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 935679#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 936453#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 933098#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 932935#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 932936#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 935500#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 933463#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 932793#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 932794#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 933138#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 935397#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 934604#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 933171#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 934919#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 934026#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 936341#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 936228#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 932894#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 935411#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 935412#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 935690#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 933922#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 932699#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 934671#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 933694#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 934440#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 934166#L2844-41 assume { :end_inline_resetCallOnFloor } true; 934403#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 935316#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 935177#L1127-5 assume { :end_inline_resetFloorButton } true; 961397#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 961395#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 961394#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 961393#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 936579#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 936580#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 961344#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 961343#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 961336#L207-2 assume !false; 950691#L208 [2022-11-25 18:35:50,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:50,468 INFO L85 PathProgramCache]: Analyzing trace with hash -1855900741, now seen corresponding path program 1 times [2022-11-25 18:35:50,468 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:50,468 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1653599013] [2022-11-25 18:35:50,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:50,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:50,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:50,545 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:50,546 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:50,546 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1653599013] [2022-11-25 18:35:50,546 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1653599013] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:50,546 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:50,547 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:35:50,547 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1899620719] [2022-11-25 18:35:50,547 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:50,549 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:50,550 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:50,550 INFO L85 PathProgramCache]: Analyzing trace with hash -1764877797, now seen corresponding path program 10 times [2022-11-25 18:35:50,550 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:50,551 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1911476503] [2022-11-25 18:35:50,551 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:50,551 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:50,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:50,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:50,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:50,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1911476503] [2022-11-25 18:35:50,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1911476503] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:50,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:50,663 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-11-25 18:35:50,663 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2118793152] [2022-11-25 18:35:50,663 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:50,663 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:50,664 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:50,664 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:35:50,664 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:35:50,664 INFO L87 Difference]: Start difference. First operand 39496 states and 73065 transitions. cyclomatic complexity: 33578 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:51,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:51,637 INFO L93 Difference]: Finished difference Result 27702 states and 50280 transitions. [2022-11-25 18:35:51,638 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27702 states and 50280 transitions. [2022-11-25 18:35:52,072 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 14022 [2022-11-25 18:35:52,122 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27702 states to 27702 states and 50280 transitions. [2022-11-25 18:35:52,122 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18602 [2022-11-25 18:35:52,132 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18602 [2022-11-25 18:35:52,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27702 states and 50280 transitions. [2022-11-25 18:35:52,133 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:52,133 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27702 states and 50280 transitions. [2022-11-25 18:35:52,145 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27702 states and 50280 transitions. [2022-11-25 18:35:52,274 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27702 to 15969. [2022-11-25 18:35:52,285 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15969 states, 15969 states have (on average 1.8000500970630597) internal successors, (28745), 15968 states have internal predecessors, (28745), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:52,305 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15969 states to 15969 states and 28745 transitions. [2022-11-25 18:35:52,305 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2022-11-25 18:35:52,306 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-11-25 18:35:52,306 INFO L428 stractBuchiCegarLoop]: Abstraction has 15969 states and 28745 transitions. [2022-11-25 18:35:52,306 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-11-25 18:35:52,306 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15969 states and 28745 transitions. [2022-11-25 18:35:52,341 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7949 [2022-11-25 18:35:52,341 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:52,341 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:52,343 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:52,343 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:52,343 INFO L748 eck$LassoCheckResult]: Stem: 1001782#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1001783#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1003535#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1003439#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1002178#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1001752#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1001419#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1001420#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1002683#L467 assume !(0 == getOrigin_~person#1); 1001908#L471 assume !(1 == getOrigin_~person#1); 1001909#L475 assume !(2 == getOrigin_~person#1); 1001612#L479 assume !(3 == getOrigin_~person#1); 1001613#L483 assume !(4 == getOrigin_~person#1); 1001742#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1002715#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1003135#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1001727#L3095 assume 1 == initPersonOnFloor_~floor#1; 1001728#L3096 assume !(0 == initPersonOnFloor_~person#1); 1003495#L3099 assume !(1 == initPersonOnFloor_~person#1); 1001238#L3102 assume !(2 == initPersonOnFloor_~person#1); 1001239#L3105 assume !(3 == initPersonOnFloor_~person#1); 1003708#L3108 assume !(4 == initPersonOnFloor_~person#1); 1003763#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1003059#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1001867#L2860 assume !(0 == callOnFloor_~floorID#1); 1001868#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1001410#L2872-2 assume { :end_inline_callOnFloor } true; 1003618#L3212 assume { :end_inline_initPersonOnFloor } true; 1002257#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1002258#L2797 assume !(0 == isFloorCalling_~floorID#1); 1002977#L2801 assume !(1 == isFloorCalling_~floorID#1); 1001413#L2805 assume !(2 == isFloorCalling_~floorID#1); 1001278#L2809 assume !(3 == isFloorCalling_~floorID#1); 1001279#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1001706#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1001500#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1000567#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1000569#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1003459#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1003724#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1003766#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1003623#L2057 assume !(1 == ~doorState~0); 1001831#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1001832#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1002609#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1002610#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1002850#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1002851#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1000423#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1000424#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1003885#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1003886#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1004537#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1004533#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1004530#L1753 assume !(1 == ~currentHeading~0); 1004478#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1004468#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1004438#L1769-1 assume { :end_inline_continueInDirection } true; 1003601#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1004435#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1004433#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1004431#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1004416#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1004386#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1004383#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1004382#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1004361#L207-2 assume !false; 1004362#L208 [2022-11-25 18:35:52,344 INFO L750 eck$LassoCheckResult]: Loop: 1004362#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1010273#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1010272#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1010271#L215 assume 1 != cleanup_~tmp___0~0#1; 1009638#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1009637#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1009631#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1009612#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1009392#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1009390#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1009388#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1009387#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1009386#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1009385#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1009384#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1009383#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1009382#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1009381#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1009379#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1009378#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1009375#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1009358#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1009356#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1009355#L1968-2 assume !(0 != ~persons_0~0); 1011017#L1968-3 assume !(0 != ~persons_1~0); 1011011#L1982-1 assume !(0 != ~persons_2~0); 1010988#L1996-1 assume !(0 != ~persons_3~0); 1010973#L2010-1 assume !(0 != ~persons_4~0); 1010967#L2024-1 assume !(0 != ~persons_5~0); 1010962#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010960#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1010881#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010870#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1010868#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1010865#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010863#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1010840#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010825#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1010821#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1010818#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010816#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1010718#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010695#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1010693#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1010691#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010690#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1010676#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010649#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1010647#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1010645#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010644#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1010634#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010608#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1010378#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1010377#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1010376#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1010365#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1010330#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1010328#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1010326#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1010325#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1010320#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1010319#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1010317#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1010313#L1127-5 assume { :end_inline_resetFloorButton } true; 1010311#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1010310#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1010309#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1010308#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1010293#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1010290#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1010280#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1010279#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1010278#L207-2 assume !false; 1004362#L208 [2022-11-25 18:35:52,345 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:52,345 INFO L85 PathProgramCache]: Analyzing trace with hash 1809966439, now seen corresponding path program 1 times [2022-11-25 18:35:52,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:52,345 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1124605042] [2022-11-25 18:35:52,345 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:52,346 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:52,359 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:52,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:52,440 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:52,440 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1124605042] [2022-11-25 18:35:52,440 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1124605042] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:52,440 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:52,440 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:35:52,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2112653286] [2022-11-25 18:35:52,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:52,441 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:52,441 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:52,442 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 1 times [2022-11-25 18:35:52,442 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:52,442 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1569782763] [2022-11-25 18:35:52,442 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:52,442 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:52,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:52,479 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:52,479 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:52,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1569782763] [2022-11-25 18:35:52,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1569782763] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:52,480 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:52,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:52,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883060242] [2022-11-25 18:35:52,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:52,481 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:52,481 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:52,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:35:52,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:35:52,482 INFO L87 Difference]: Start difference. First operand 15969 states and 28745 transitions. cyclomatic complexity: 12780 Second operand has 6 states, 6 states have (on average 11.166666666666666) internal successors, (67), 5 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:54,585 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:54,585 INFO L93 Difference]: Finished difference Result 104406 states and 190999 transitions. [2022-11-25 18:35:54,586 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104406 states and 190999 transitions. [2022-11-25 18:35:54,944 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 41283 [2022-11-25 18:35:55,273 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104406 states to 104406 states and 190999 transitions. [2022-11-25 18:35:55,273 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69976 [2022-11-25 18:35:55,314 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69976 [2022-11-25 18:35:55,314 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104406 states and 190999 transitions. [2022-11-25 18:35:55,315 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:55,315 INFO L218 hiAutomatonCegarLoop]: Abstraction has 104406 states and 190999 transitions. [2022-11-25 18:35:55,365 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104406 states and 190999 transitions. [2022-11-25 18:35:56,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104406 to 31620. [2022-11-25 18:35:56,343 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31620 states, 31620 states have (on average 1.8004427577482607) internal successors, (56930), 31619 states have internal predecessors, (56930), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:56,385 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31620 states to 31620 states and 56930 transitions. [2022-11-25 18:35:56,385 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2022-11-25 18:35:56,386 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-11-25 18:35:56,386 INFO L428 stractBuchiCegarLoop]: Abstraction has 31620 states and 56930 transitions. [2022-11-25 18:35:56,386 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-11-25 18:35:56,386 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31620 states and 56930 transitions. [2022-11-25 18:35:56,456 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15745 [2022-11-25 18:35:56,456 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:35:56,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:35:56,457 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:56,458 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:35:56,458 INFO L748 eck$LassoCheckResult]: Stem: 1122207#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1122208#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1124005#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1123894#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1122605#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1122178#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1121841#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1121842#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1123110#L467 assume !(0 == getOrigin_~person#1); 1122336#L471 assume !(1 == getOrigin_~person#1); 1122337#L475 assume !(2 == getOrigin_~person#1); 1122037#L479 assume !(3 == getOrigin_~person#1); 1122038#L483 assume !(4 == getOrigin_~person#1); 1122168#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1123142#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1123576#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1122153#L3095 assume 1 == initPersonOnFloor_~floor#1; 1122154#L3096 assume !(0 == initPersonOnFloor_~person#1); 1123963#L3099 assume !(1 == initPersonOnFloor_~person#1); 1121648#L3102 assume !(2 == initPersonOnFloor_~person#1); 1121649#L3105 assume !(3 == initPersonOnFloor_~person#1); 1124200#L3108 assume !(4 == initPersonOnFloor_~person#1); 1124269#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1123501#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1122296#L2860 assume !(0 == callOnFloor_~floorID#1); 1122297#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1121832#L2872-2 assume { :end_inline_callOnFloor } true; 1124099#L3212 assume { :end_inline_initPersonOnFloor } true; 1124100#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1123418#L2797 assume !(0 == isFloorCalling_~floorID#1); 1123419#L2801 assume !(1 == isFloorCalling_~floorID#1); 1121835#L2805 assume !(2 == isFloorCalling_~floorID#1); 1121692#L2809 assume !(3 == isFloorCalling_~floorID#1); 1121693#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1123323#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1123324#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1120971#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1120972#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1122245#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1123107#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1120958#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1125215#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1125213#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1124106#L2057 assume !(1 == ~doorState~0); 1124107#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1128920#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1128919#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1128918#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1128917#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1128916#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1128915#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1128914#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1128912#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1123764#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1121100#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1123509#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1123578#L1753 assume !(1 == ~currentHeading~0); 1129404#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1124500#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1123861#L1769-1 assume { :end_inline_continueInDirection } true; 1123862#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1123792#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1123793#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1135545#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1120557#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1120558#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1120431#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1123157#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1123158#L207-2 assume !false; 1135550#L208 [2022-11-25 18:35:56,458 INFO L750 eck$LassoCheckResult]: Loop: 1135550#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1147789#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1147787#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1147573#L215 assume 1 != cleanup_~tmp___0~0#1; 1147567#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1147566#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1147549#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1147528#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1147493#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1147031#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1141619#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1141618#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1141617#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1141616#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1141615#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1141614#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1141613#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1141612#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1141611#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1141610#L2797-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1141591#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1141583#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1141562#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1141560#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1141392#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1141286#L1968-2 assume !(0 != ~persons_0~0); 1150923#L1968-3 assume !(0 != ~persons_1~0); 1150902#L1982-1 assume !(0 != ~persons_2~0); 1150883#L1996-1 assume !(0 != ~persons_3~0); 1150871#L2010-1 assume !(0 != ~persons_4~0); 1150864#L2024-1 assume !(0 != ~persons_5~0); 1150860#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150856#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1150834#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150823#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1150821#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1150819#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150641#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1150615#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150596#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1150593#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1150591#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150590#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1150506#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150483#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1150481#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1150479#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150478#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1150464#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150441#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1150439#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1150437#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150436#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1150373#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150341#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1150338#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1150337#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1150336#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1150324#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1150294#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1150286#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1150284#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1150283#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1137641#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1150278#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1150276#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1150269#L1127-5 assume { :end_inline_resetFloorButton } true; 1150268#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1120925#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1120926#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1150267#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1124315#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1124316#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1148792#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1148791#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1148724#L207-2 assume !false; 1135550#L208 [2022-11-25 18:35:56,459 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:56,459 INFO L85 PathProgramCache]: Analyzing trace with hash 1772525671, now seen corresponding path program 1 times [2022-11-25 18:35:56,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:56,460 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1580628335] [2022-11-25 18:35:56,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:56,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:56,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:56,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:56,534 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:56,534 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1580628335] [2022-11-25 18:35:56,535 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1580628335] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:56,535 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:56,535 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:35:56,535 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1146348063] [2022-11-25 18:35:56,535 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:56,535 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:35:56,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:35:56,536 INFO L85 PathProgramCache]: Analyzing trace with hash -583023835, now seen corresponding path program 1 times [2022-11-25 18:35:56,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:35:56,536 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [554644440] [2022-11-25 18:35:56,536 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:35:56,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:35:56,545 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:35:56,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:35:56,590 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:35:56,590 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [554644440] [2022-11-25 18:35:56,590 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [554644440] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:35:56,590 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:35:56,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:35:56,591 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1853951344] [2022-11-25 18:35:56,591 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:35:56,591 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:35:56,591 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:35:56,592 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:35:56,592 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:35:56,592 INFO L87 Difference]: Start difference. First operand 31620 states and 56930 transitions. cyclomatic complexity: 25318 Second operand has 5 states, 5 states have (on average 13.8) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:35:58,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:35:58,482 INFO L93 Difference]: Finished difference Result 93785 states and 169257 transitions. [2022-11-25 18:35:58,482 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 93785 states and 169257 transitions. [2022-11-25 18:35:58,904 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 46706 [2022-11-25 18:35:59,155 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 93785 states to 93785 states and 169257 transitions. [2022-11-25 18:35:59,156 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 63069 [2022-11-25 18:35:59,195 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 63069 [2022-11-25 18:35:59,196 INFO L73 IsDeterministic]: Start isDeterministic. Operand 93785 states and 169257 transitions. [2022-11-25 18:35:59,196 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:35:59,197 INFO L218 hiAutomatonCegarLoop]: Abstraction has 93785 states and 169257 transitions. [2022-11-25 18:35:59,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 93785 states and 169257 transitions. [2022-11-25 18:35:59,811 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 93785 to 31722. [2022-11-25 18:35:59,834 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31722 states, 31722 states have (on average 1.797868986823025) internal successors, (57032), 31721 states have internal predecessors, (57032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:00,436 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31722 states to 31722 states and 57032 transitions. [2022-11-25 18:36:00,439 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2022-11-25 18:36:00,440 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-11-25 18:36:00,450 INFO L428 stractBuchiCegarLoop]: Abstraction has 31722 states and 57032 transitions. [2022-11-25 18:36:00,450 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-11-25 18:36:00,450 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31722 states and 57032 transitions. [2022-11-25 18:36:00,533 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 15799 [2022-11-25 18:36:00,533 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:36:00,534 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:36:00,535 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:00,536 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:00,536 INFO L748 eck$LassoCheckResult]: Stem: 1247631#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1247632#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1249473#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1249372#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1248042#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1247604#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1247260#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1247261#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1248562#L467 assume !(0 == getOrigin_~person#1); 1247762#L471 assume !(1 == getOrigin_~person#1); 1247763#L475 assume !(2 == getOrigin_~person#1); 1247460#L479 assume !(3 == getOrigin_~person#1); 1247461#L483 assume !(4 == getOrigin_~person#1); 1247594#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1248591#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1249046#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1247579#L3095 assume 1 == initPersonOnFloor_~floor#1; 1247580#L3096 assume !(0 == initPersonOnFloor_~person#1); 1249433#L3099 assume !(1 == initPersonOnFloor_~person#1); 1247073#L3102 assume !(2 == initPersonOnFloor_~person#1); 1247074#L3105 assume !(3 == initPersonOnFloor_~person#1); 1249664#L3108 assume !(4 == initPersonOnFloor_~person#1); 1249734#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1248958#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1247722#L2860 assume !(0 == callOnFloor_~floorID#1); 1247723#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1247251#L2872-2 assume { :end_inline_callOnFloor } true; 1249564#L3212 assume { :end_inline_initPersonOnFloor } true; 1249565#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1248872#L2797 assume !(0 == isFloorCalling_~floorID#1); 1248873#L2801 assume !(1 == isFloorCalling_~floorID#1); 1247254#L2805 assume !(2 == isFloorCalling_~floorID#1); 1247117#L2809 assume !(3 == isFloorCalling_~floorID#1); 1247118#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1248773#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1248774#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1246391#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1246392#L2797-2 assume !(0 == isFloorCalling_~floorID#1); 1249675#L2801-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1247817#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1250011#L1786-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1246378#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1249682#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1249737#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1249571#L2057 assume !(1 == ~doorState~0); 1249572#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1245806#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1245807#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1249810#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1249811#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1248255#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1248256#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1249914#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1249915#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1249247#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1249248#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1253978#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1253977#L1753 assume !(1 == ~currentHeading~0); 1253976#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1249995#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1253842#L1769-1 assume { :end_inline_continueInDirection } true; 1249546#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1253839#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1253834#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1253832#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1253833#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1253814#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1253802#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1253800#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1252913#L207-2 assume !false; 1252914#L208 [2022-11-25 18:36:00,536 INFO L750 eck$LassoCheckResult]: Loop: 1252914#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1265720#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1265711#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1265705#L215 assume 1 != cleanup_~tmp___0~0#1; 1265700#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1265699#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1265680#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1265666#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1265651#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1265640#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1263608#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263607#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1263606#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1263605#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1263604#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1263603#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263601#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1263596#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1263594#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1263593#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1263590#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1263587#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1263585#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1263582#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1263580#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1263577#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1263578#L1968-2 assume !(0 != ~persons_0~0); 1266467#L1968-3 assume !(0 != ~persons_1~0); 1266461#L1982-1 assume !(0 != ~persons_2~0); 1266436#L1996-1 assume !(0 != ~persons_3~0); 1266431#L2010-1 assume !(0 != ~persons_4~0); 1266426#L2024-1 assume !(0 != ~persons_5~0); 1266422#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266420#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1266396#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266379#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1266377#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1266375#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266373#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1266351#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266331#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1266329#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1266327#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266326#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1266308#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266285#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1266283#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1266281#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266280#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1266265#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266238#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1266236#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1266234#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1266232#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1266099#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1266035#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1266026#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1265902#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1265898#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1265845#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1265814#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1265805#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1265802#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1265797#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1265790#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1265789#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1265787#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1265783#L1127-5 assume { :end_inline_resetFloorButton } true; 1265779#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1265772#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1265770#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1265768#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1265765#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1265748#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1265734#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1265724#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1265722#L207-2 assume !false; 1252914#L208 [2022-11-25 18:36:00,537 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:00,537 INFO L85 PathProgramCache]: Analyzing trace with hash 1529154201, now seen corresponding path program 1 times [2022-11-25 18:36:00,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:00,538 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1481063998] [2022-11-25 18:36:00,538 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:00,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:00,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:00,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:00,602 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:00,602 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1481063998] [2022-11-25 18:36:00,603 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1481063998] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:00,603 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:00,603 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-11-25 18:36:00,603 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [579642120] [2022-11-25 18:36:00,603 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:00,604 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:36:00,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:00,604 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 1 times [2022-11-25 18:36:00,604 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:00,604 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285507257] [2022-11-25 18:36:00,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:00,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:00,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:00,695 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:00,696 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:00,696 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285507257] [2022-11-25 18:36:00,696 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [285507257] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:00,696 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:00,696 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:36:00,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1913899561] [2022-11-25 18:36:00,697 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:00,697 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:36:00,697 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:36:00,697 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-11-25 18:36:00,698 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-11-25 18:36:00,698 INFO L87 Difference]: Start difference. First operand 31722 states and 57032 transitions. cyclomatic complexity: 25318 Second operand has 4 states, 4 states have (on average 17.5) internal successors, (70), 3 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:01,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:36:01,988 INFO L93 Difference]: Finished difference Result 62479 states and 112227 transitions. [2022-11-25 18:36:01,988 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 62479 states and 112227 transitions. [2022-11-25 18:36:02,180 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 31546 [2022-11-25 18:36:02,320 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 62479 states to 62479 states and 112227 transitions. [2022-11-25 18:36:02,320 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40123 [2022-11-25 18:36:02,345 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40123 [2022-11-25 18:36:02,345 INFO L73 IsDeterministic]: Start isDeterministic. Operand 62479 states and 112227 transitions. [2022-11-25 18:36:02,352 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:36:02,352 INFO L218 hiAutomatonCegarLoop]: Abstraction has 62479 states and 112227 transitions. [2022-11-25 18:36:02,391 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 62479 states and 112227 transitions. [2022-11-25 18:36:03,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 62479 to 36080. [2022-11-25 18:36:03,274 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 36080 states, 36080 states have (on average 1.7754988913525498) internal successors, (64060), 36079 states have internal predecessors, (64060), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:03,322 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 36080 states to 36080 states and 64060 transitions. [2022-11-25 18:36:03,322 INFO L240 hiAutomatonCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2022-11-25 18:36:03,322 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:36:03,323 INFO L428 stractBuchiCegarLoop]: Abstraction has 36080 states and 64060 transitions. [2022-11-25 18:36:03,323 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-11-25 18:36:03,323 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 36080 states and 64060 transitions. [2022-11-25 18:36:03,398 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 18244 [2022-11-25 18:36:03,398 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:36:03,398 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:36:03,400 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:03,400 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:03,400 INFO L748 eck$LassoCheckResult]: Stem: 1341746#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1341747#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1343460#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1343356#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1342106#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1341721#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1341405#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1341406#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1342585#L467 assume !(0 == getOrigin_~person#1); 1341868#L471 assume !(1 == getOrigin_~person#1); 1341869#L475 assume !(2 == getOrigin_~person#1); 1341584#L479 assume !(3 == getOrigin_~person#1); 1341585#L483 assume !(4 == getOrigin_~person#1); 1341711#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1342618#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1343036#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1341696#L3095 assume 1 == initPersonOnFloor_~floor#1; 1341697#L3096 assume !(0 == initPersonOnFloor_~person#1); 1343418#L3099 assume !(1 == initPersonOnFloor_~person#1); 1341225#L3102 assume !(2 == initPersonOnFloor_~person#1); 1341226#L3105 assume !(3 == initPersonOnFloor_~person#1); 1343634#L3108 assume !(4 == initPersonOnFloor_~person#1); 1343692#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1342961#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1341831#L2860 assume !(0 == callOnFloor_~floorID#1); 1341832#L2863 assume !(1 == callOnFloor_~floorID#1); 1341395#L2866 assume !(2 == callOnFloor_~floorID#1); 1341397#L2869 assume !(3 == callOnFloor_~floorID#1); 1342725#L2872 assume 4 == callOnFloor_~floorID#1;~calls_4~0 := 1; 1342726#L2872-2 assume { :end_inline_callOnFloor } true; 1343554#L3212 assume { :end_inline_initPersonOnFloor } true; 1342182#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1342183#L2797 assume !(0 == isFloorCalling_~floorID#1); 1342884#L2801 assume !(1 == isFloorCalling_~floorID#1); 1341399#L2805 assume !(2 == isFloorCalling_~floorID#1); 1341271#L2809 assume !(3 == isFloorCalling_~floorID#1); 1341272#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1341674#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1341478#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1341479#L1813 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1343381#L1144 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1343382#L1817 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1343649#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1343693#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1343694#L2057 assume !(1 == ~doorState~0); 1347678#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1347677#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1347676#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1347675#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1347674#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1347673#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1347672#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1347671#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1347669#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347667#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1347666#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1347664#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1347663#L1753 assume !(1 == ~currentHeading~0); 1347661#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1347657#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1347654#L1769-1 assume { :end_inline_continueInDirection } true; 1347653#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1347652#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1347651#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1347649#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1347647#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1347648#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1349923#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1349920#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1349898#L207-2 assume !false; 1349899#L208 [2022-11-25 18:36:03,401 INFO L750 eck$LassoCheckResult]: Loop: 1349899#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1361283#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1361282#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1361281#L215 assume 1 != cleanup_~tmp___0~0#1; 1361229#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1361227#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1361225#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1361219#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1361209#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1361206#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1361204#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1361203#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1361202#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1361201#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1361200#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1361199#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1361198#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1361197#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1361195#L1813-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~19#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1361194#L1144-4 stopRequestedAtCurrentFloor_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~6#1 := stopRequestedAtCurrentFloor_#t~ret66#1;havoc stopRequestedAtCurrentFloor_#t~ret66#1; 1361191#L1817-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~6#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1361188#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1361186#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1361091#L1968-2 assume !(0 != ~persons_0~0); 1362783#L1968-3 assume !(0 != ~persons_1~0); 1362777#L1982-1 assume !(0 != ~persons_2~0); 1362752#L1996-1 assume !(0 != ~persons_3~0); 1362747#L2010-1 assume !(0 != ~persons_4~0); 1362742#L2024-1 assume !(0 != ~persons_5~0); 1362738#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1362737#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1362712#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1362695#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1362693#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1362691#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1362690#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1362617#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1362591#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1362578#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1362551#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1362550#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1362533#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1362512#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1362006#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1362004#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361967#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1361928#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361901#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1361899#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1361897#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361896#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1361886#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361506#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1361497#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1361495#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1361432#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1361413#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1361383#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1361379#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1361376#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1361374#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1361366#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1361364#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1361360#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1361356#L1127-5 assume { :end_inline_resetFloorButton } true; 1361354#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1361353#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1361352#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1361350#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1361351#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1361297#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1361287#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1361286#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1361285#L207-2 assume !false; 1349899#L208 [2022-11-25 18:36:03,401 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:03,401 INFO L85 PathProgramCache]: Analyzing trace with hash -1232492494, now seen corresponding path program 1 times [2022-11-25 18:36:03,402 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:03,402 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [637893521] [2022-11-25 18:36:03,402 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:03,402 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:03,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:03,495 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:03,495 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:03,495 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [637893521] [2022-11-25 18:36:03,495 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [637893521] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:03,496 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:03,496 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:36:03,496 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1104792793] [2022-11-25 18:36:03,496 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:03,496 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:36:03,497 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:03,497 INFO L85 PathProgramCache]: Analyzing trace with hash -1832533435, now seen corresponding path program 2 times [2022-11-25 18:36:03,497 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:03,497 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2094133261] [2022-11-25 18:36:03,497 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:03,498 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:03,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:03,537 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:03,537 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:03,537 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2094133261] [2022-11-25 18:36:03,537 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2094133261] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:03,538 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:03,538 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:36:03,538 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [338003841] [2022-11-25 18:36:03,538 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:03,539 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:36:03,539 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:36:03,541 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:36:03,541 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:36:03,541 INFO L87 Difference]: Start difference. First operand 36080 states and 64060 transitions. cyclomatic complexity: 27992 Second operand has 5 states, 5 states have (on average 14.0) internal successors, (70), 5 states have internal predecessors, (70), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:03,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:36:03,638 INFO L93 Difference]: Finished difference Result 17880 states and 31744 transitions. [2022-11-25 18:36:03,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17880 states and 31744 transitions. [2022-11-25 18:36:03,691 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2022-11-25 18:36:03,727 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17880 states to 17880 states and 31744 transitions. [2022-11-25 18:36:03,727 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11471 [2022-11-25 18:36:03,733 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11471 [2022-11-25 18:36:03,733 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17880 states and 31744 transitions. [2022-11-25 18:36:03,734 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:36:03,734 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2022-11-25 18:36:03,743 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17880 states and 31744 transitions. [2022-11-25 18:36:03,850 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17880 to 17880. [2022-11-25 18:36:03,862 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 17880 states, 17880 states have (on average 1.7753914988814317) internal successors, (31744), 17879 states have internal predecessors, (31744), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:03,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17880 states to 17880 states and 31744 transitions. [2022-11-25 18:36:03,889 INFO L240 hiAutomatonCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2022-11-25 18:36:03,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-11-25 18:36:03,890 INFO L428 stractBuchiCegarLoop]: Abstraction has 17880 states and 31744 transitions. [2022-11-25 18:36:03,890 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-11-25 18:36:03,890 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17880 states and 31744 transitions. [2022-11-25 18:36:03,927 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9030 [2022-11-25 18:36:03,928 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:36:03,928 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:36:03,929 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:03,929 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:03,930 INFO L748 eck$LassoCheckResult]: Stem: 1395670#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1395671#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1397221#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1397144#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1396012#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1395643#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1395336#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1395337#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1396471#L467 assume !(0 == getOrigin_~person#1); 1395786#L471 assume !(1 == getOrigin_~person#1); 1395787#L475 assume !(2 == getOrigin_~person#1); 1395504#L479 assume !(3 == getOrigin_~person#1); 1395505#L483 assume !(4 == getOrigin_~person#1); 1395632#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1396498#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1396881#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1395616#L3095 assume 1 == initPersonOnFloor_~floor#1; 1395617#L3096 assume !(0 == initPersonOnFloor_~person#1); 1397190#L3099 assume !(1 == initPersonOnFloor_~person#1); 1395173#L3102 assume !(2 == initPersonOnFloor_~person#1); 1395174#L3105 assume !(3 == initPersonOnFloor_~person#1); 1397374#L3108 assume !(4 == initPersonOnFloor_~person#1); 1397424#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1396815#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1395750#L2860 assume !(0 == callOnFloor_~floorID#1); 1395751#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1396733#L2872-2 assume { :end_inline_callOnFloor } true; 1397301#L3212 assume { :end_inline_initPersonOnFloor } true; 1396089#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1396090#L2797 assume !(0 == isFloorCalling_~floorID#1); 1396741#L2801 assume !(1 == isFloorCalling_~floorID#1); 1395330#L2805 assume !(2 == isFloorCalling_~floorID#1); 1395214#L2809 assume !(3 == isFloorCalling_~floorID#1); 1395215#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395594#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1395408#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1394551#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1394552#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1395701#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1396468#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1394221#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1394222#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1394537#L1793-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1394538#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1397387#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1397425#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1397304#L2057 assume !(1 == ~doorState~0); 1397305#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1398338#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1398337#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1398336#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1398335#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1398334#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1398333#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1398332#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1398331#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1398307#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1398306#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1398304#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1398303#L1753 assume !(1 == ~currentHeading~0); 1398300#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1398273#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1398253#L1769-1 assume { :end_inline_continueInDirection } true; 1398248#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1398242#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1398183#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1398181#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1398182#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1398151#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1398131#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1398126#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1398100#L207-2 assume !false; 1398101#L208 [2022-11-25 18:36:03,930 INFO L750 eck$LassoCheckResult]: Loop: 1398101#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1403153#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1403151#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1403140#L215 assume 1 != cleanup_~tmp___0~0#1; 1403135#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1403108#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1403094#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1403081#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1403071#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1403069#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1403067#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1403065#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1403063#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1403060#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1403058#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1403055#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1403054#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1403053#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1403052#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1403050#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1403051#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1403031#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1403019#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1403017#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1403015#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1403012#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1403013#L1968-2 assume !(0 != ~persons_0~0); 1405042#L1968-3 assume !(0 != ~persons_1~0); 1405036#L1982-1 assume !(0 != ~persons_2~0); 1405009#L1996-1 assume !(0 != ~persons_3~0); 1405004#L2010-1 assume !(0 != ~persons_4~0); 1404999#L2024-1 assume !(0 != ~persons_5~0); 1404995#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404994#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1404864#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1404847#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1404845#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1404843#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404842#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1404821#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1404802#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1404799#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1404797#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404796#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1404771#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1404754#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1404750#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1404748#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404747#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1404722#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1404693#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1404680#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1404677#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404676#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1404651#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1404618#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1404614#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1404613#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1404555#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1395080#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1393923#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1395761#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1394859#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1395536#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1395295#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1395498#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1396343#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1403190#L1127-5 assume { :end_inline_resetFloorButton } true; 1403188#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1403187#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1403185#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1403175#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1403173#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1403170#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1403159#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1403158#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1403156#L207-2 assume !false; 1398101#L208 [2022-11-25 18:36:03,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:03,931 INFO L85 PathProgramCache]: Analyzing trace with hash 1188656001, now seen corresponding path program 1 times [2022-11-25 18:36:03,931 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:03,931 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1159040647] [2022-11-25 18:36:03,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:03,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:03,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:04,014 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:04,014 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:04,015 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1159040647] [2022-11-25 18:36:04,015 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1159040647] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:04,015 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:04,015 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-11-25 18:36:04,015 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822260015] [2022-11-25 18:36:04,015 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:04,016 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:36:04,017 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:04,017 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 2 times [2022-11-25 18:36:04,017 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:04,017 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605274732] [2022-11-25 18:36:04,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:04,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:04,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:04,111 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:04,112 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:04,112 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605274732] [2022-11-25 18:36:04,112 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605274732] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:04,112 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:04,112 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:36:04,112 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1755200311] [2022-11-25 18:36:04,113 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:04,114 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:36:04,114 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:36:04,114 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-11-25 18:36:04,114 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-11-25 18:36:04,115 INFO L87 Difference]: Start difference. First operand 17880 states and 31744 transitions. cyclomatic complexity: 13870 Second operand has 5 states, 5 states have (on average 14.4) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:05,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:36:05,162 INFO L93 Difference]: Finished difference Result 130551 states and 231885 transitions. [2022-11-25 18:36:05,162 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 130551 states and 231885 transitions. [2022-11-25 18:36:05,586 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 68492 [2022-11-25 18:36:06,456 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 130551 states to 130551 states and 231885 transitions. [2022-11-25 18:36:06,456 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82679 [2022-11-25 18:36:06,511 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82679 [2022-11-25 18:36:06,512 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130551 states and 231885 transitions. [2022-11-25 18:36:06,513 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:36:06,518 INFO L218 hiAutomatonCegarLoop]: Abstraction has 130551 states and 231885 transitions. [2022-11-25 18:36:06,581 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130551 states and 231885 transitions. [2022-11-25 18:36:07,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130551 to 34535. [2022-11-25 18:36:07,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34535 states, 34535 states have (on average 1.7757347618358188) internal successors, (61325), 34534 states have internal predecessors, (61325), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:07,384 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34535 states to 34535 states and 61325 transitions. [2022-11-25 18:36:07,384 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34535 states and 61325 transitions. [2022-11-25 18:36:07,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-11-25 18:36:07,385 INFO L428 stractBuchiCegarLoop]: Abstraction has 34535 states and 61325 transitions. [2022-11-25 18:36:07,385 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-11-25 18:36:07,385 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34535 states and 61325 transitions. [2022-11-25 18:36:07,480 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 17780 [2022-11-25 18:36:07,480 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:36:07,480 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:36:07,483 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:07,483 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:07,484 INFO L748 eck$LassoCheckResult]: Stem: 1544138#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1544139#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1545739#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1545653#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1544492#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1544115#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1543804#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1543805#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1544955#L467 assume !(0 == getOrigin_~person#1); 1544260#L471 assume !(1 == getOrigin_~person#1); 1544261#L475 assume !(2 == getOrigin_~person#1); 1543974#L479 assume !(3 == getOrigin_~person#1); 1543975#L483 assume !(4 == getOrigin_~person#1); 1544103#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1544985#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1545372#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1544089#L3095 assume 1 == initPersonOnFloor_~floor#1; 1544090#L3096 assume !(0 == initPersonOnFloor_~person#1); 1545704#L3099 assume !(1 == initPersonOnFloor_~person#1); 1543633#L3102 assume !(2 == initPersonOnFloor_~person#1); 1543634#L3105 assume !(3 == initPersonOnFloor_~person#1); 1545918#L3108 assume !(4 == initPersonOnFloor_~person#1); 1545964#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1545309#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1544224#L2860 assume !(0 == callOnFloor_~floorID#1); 1544225#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1545225#L2872-2 assume { :end_inline_callOnFloor } true; 1545836#L3212 assume { :end_inline_initPersonOnFloor } true; 1544565#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1544566#L2797 assume !(0 == isFloorCalling_~floorID#1); 1545236#L2801 assume !(1 == isFloorCalling_~floorID#1); 1543798#L2805 assume !(2 == isFloorCalling_~floorID#1); 1543672#L2809 assume !(3 == isFloorCalling_~floorID#1); 1543673#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1544067#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1543877#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1542997#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1542998#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1544174#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1544952#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1542670#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1542671#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1542989#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1542990#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1545932#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1545967#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1545839#L2057 assume !(1 == ~doorState~0); 1545840#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1546188#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1546187#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1546186#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1546185#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1546179#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1546177#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1546089#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1546090#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1545553#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1543117#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1545373#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1545375#L1753 assume !(1 == ~currentHeading~0); 1545160#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1545161#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1546172#L1769-1 assume { :end_inline_continueInDirection } true; 1543692#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1543693#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1543915#L2593 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1543916#L2594 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1546161#L1153 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1546162#L2598 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1548892#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1548891#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1548889#L207-2 assume !false; 1548890#L208 [2022-11-25 18:36:07,484 INFO L750 eck$LassoCheckResult]: Loop: 1548890#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1569931#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1569930#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1569929#L215 assume 1 != cleanup_~tmp___0~0#1; 1569928#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1569927#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1569926#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1568729#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1568720#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1568709#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1568701#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1568700#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1568694#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1568691#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1568537#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1568530#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1568531#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1569871#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1568486#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1568487#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1569868#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1568476#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1568460#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1568457#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1568455#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1568456#L1966-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1565907#L1968-2 assume !(0 != ~persons_0~0); 1565898#L1968-3 assume !(0 != ~persons_1~0); 1565893#L1982-1 assume !(0 != ~persons_2~0); 1565870#L1996-1 assume !(0 != ~persons_3~0); 1565865#L2010-1 assume !(0 != ~persons_4~0); 1565861#L2024-1 assume !(0 != ~persons_5~0); 1565858#L2038-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret69#1, processWaitingOnFloor_#t~ret70#1, processWaitingOnFloor_#t~ret71#1, processWaitingOnFloor_#t~ret72#1, processWaitingOnFloor_#t~ret73#1, processWaitingOnFloor_#t~ret74#1, processWaitingOnFloor_#t~ret75#1, processWaitingOnFloor_#t~ret76#1, processWaitingOnFloor_#t~ret77#1, processWaitingOnFloor_#t~ret78#1, processWaitingOnFloor_#t~ret79#1, processWaitingOnFloor_#t~ret80#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~20#1, processWaitingOnFloor_~tmp___0~7#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~2#1, processWaitingOnFloor_~tmp___4~1#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~20#1;havoc processWaitingOnFloor_~tmp___0~7#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~2#1;havoc processWaitingOnFloor_~tmp___4~1#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1565856#L2888-12 assume 0 == isPersonOnFloor_~floor#1; 1565797#L2889-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1565785#L3060-6 processWaitingOnFloor_#t~ret69#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~7#1 := processWaitingOnFloor_#t~ret69#1;havoc processWaitingOnFloor_#t~ret69#1; 1565450#L1867-3 assume !(0 != processWaitingOnFloor_~tmp___0~7#1); 1563757#L1867-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1563750#L2888-14 assume 0 == isPersonOnFloor_~floor#1; 1563729#L2889-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1563709#L3060-7 processWaitingOnFloor_#t~ret71#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret71#1;havoc processWaitingOnFloor_#t~ret71#1; 1563707#L1880-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 1563705#L1880-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1563704#L2888-16 assume 0 == isPersonOnFloor_~floor#1; 1563685#L2889-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1563662#L3060-8 processWaitingOnFloor_#t~ret73#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~1#1 := processWaitingOnFloor_#t~ret73#1;havoc processWaitingOnFloor_#t~ret73#1; 1563660#L1893-3 assume !(0 != processWaitingOnFloor_~tmp___4~1#1); 1563658#L1893-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1563657#L2888-18 assume 0 == isPersonOnFloor_~floor#1; 1563611#L2889-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1563589#L3060-9 processWaitingOnFloor_#t~ret75#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret75#1;havoc processWaitingOnFloor_#t~ret75#1; 1563586#L1906-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1563587#L1906-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1563963#L2888-20 assume 0 == isPersonOnFloor_~floor#1; 1563953#L2889-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1563927#L3060-10 processWaitingOnFloor_#t~ret77#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret77#1;havoc processWaitingOnFloor_#t~ret77#1; 1563925#L1919-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1563926#L1919-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~26#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~26#1; 1566458#L2888-22 assume 0 == isPersonOnFloor_~floor#1; 1566451#L2889-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~26#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; 1566422#L3060-11 processWaitingOnFloor_#t~ret79#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret79#1;havoc processWaitingOnFloor_#t~ret79#1; 1566420#L1932-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1566421#L1932-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1568813#L2832-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1568806#L2844-41 assume { :end_inline_resetCallOnFloor } true; 1568804#L1945-1 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1568801#L1115-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1562603#L1127-5 assume { :end_inline_resetFloorButton } true; 1568795#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1568794#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1568793#L2593-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1568792#L2594-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1568791#L1153-5 __utac_acc__Specification2_spec__3_#t~ret126#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~3#1 := __utac_acc__Specification2_spec__3_#t~ret126#1;havoc __utac_acc__Specification2_spec__3_#t~ret126#1; 1568788#L2598-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~3#1;~floorButtons_spc2_0~0 := 0; 1568790#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1569933#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1569932#L207-2 assume !false; 1548890#L208 [2022-11-25 18:36:07,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:07,484 INFO L85 PathProgramCache]: Analyzing trace with hash 1211288255, now seen corresponding path program 1 times [2022-11-25 18:36:07,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:07,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [493178049] [2022-11-25 18:36:07,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:07,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:07,503 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:07,542 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:07,542 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:07,542 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [493178049] [2022-11-25 18:36:07,543 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [493178049] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:07,543 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:07,543 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-11-25 18:36:07,543 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1828652172] [2022-11-25 18:36:07,543 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:07,544 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:36:07,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:07,544 INFO L85 PathProgramCache]: Analyzing trace with hash 1612225554, now seen corresponding path program 3 times [2022-11-25 18:36:07,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:07,545 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [811763732] [2022-11-25 18:36:07,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:07,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:07,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:07,656 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:07,656 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:07,656 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [811763732] [2022-11-25 18:36:07,656 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [811763732] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:07,656 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:07,657 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:36:07,657 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656762818] [2022-11-25 18:36:07,657 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:07,657 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:36:07,658 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:36:07,658 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-11-25 18:36:07,658 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-11-25 18:36:07,659 INFO L87 Difference]: Start difference. First operand 34535 states and 61325 transitions. cyclomatic complexity: 26796 Second operand has 3 states, 3 states have (on average 24.0) internal successors, (72), 2 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:07,837 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:36:07,837 INFO L93 Difference]: Finished difference Result 27550 states and 49504 transitions. [2022-11-25 18:36:07,837 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27550 states and 49504 transitions. [2022-11-25 18:36:07,967 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2022-11-25 18:36:08,573 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27550 states to 27550 states and 49504 transitions. [2022-11-25 18:36:08,574 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17440 [2022-11-25 18:36:08,583 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17440 [2022-11-25 18:36:08,584 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27550 states and 49504 transitions. [2022-11-25 18:36:08,584 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:36:08,584 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2022-11-25 18:36:08,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27550 states and 49504 transitions. [2022-11-25 18:36:08,765 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27550 to 27550. [2022-11-25 18:36:08,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27550 states, 27550 states have (on average 1.7968784029038112) internal successors, (49504), 27549 states have internal predecessors, (49504), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:08,819 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27550 states to 27550 states and 49504 transitions. [2022-11-25 18:36:08,820 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2022-11-25 18:36:08,820 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-11-25 18:36:08,820 INFO L428 stractBuchiCegarLoop]: Abstraction has 27550 states and 49504 transitions. [2022-11-25 18:36:08,820 INFO L335 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-11-25 18:36:08,820 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27550 states and 49504 transitions. [2022-11-25 18:36:08,879 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 14554 [2022-11-25 18:36:08,879 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-11-25 18:36:08,879 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-11-25 18:36:08,882 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:08,882 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-11-25 18:36:08,882 INFO L748 eck$LassoCheckResult]: Stem: 1606228#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1606229#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1607765#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1607683#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1606569#L3418 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1606203#L408 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1605895#L377 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1605896#L2548 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1607025#L467 assume !(0 == getOrigin_~person#1); 1606343#L471 assume !(1 == getOrigin_~person#1); 1606344#L475 assume !(2 == getOrigin_~person#1); 1606061#L479 assume !(3 == getOrigin_~person#1); 1606062#L483 assume !(4 == getOrigin_~person#1); 1606191#L487 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1607053#L492 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1607427#L3068 assume !(0 == initPersonOnFloor_~floor#1); 1606178#L3095 assume 1 == initPersonOnFloor_~floor#1; 1606179#L3096 assume !(0 == initPersonOnFloor_~person#1); 1607731#L3099 assume !(1 == initPersonOnFloor_~person#1); 1605725#L3102 assume !(2 == initPersonOnFloor_~person#1); 1605726#L3105 assume !(3 == initPersonOnFloor_~person#1); 1607907#L3108 assume !(4 == initPersonOnFloor_~person#1); 1607955#L3111 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1607365#L3176-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1606308#L2860 assume !(0 == callOnFloor_~floorID#1); 1606309#L2863 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1607283#L2872-2 assume { :end_inline_callOnFloor } true; 1607839#L3212 assume { :end_inline_initPersonOnFloor } true; 1606643#L177 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1606644#L2797 assume !(0 == isFloorCalling_~floorID#1); 1607292#L2801 assume !(1 == isFloorCalling_~floorID#1); 1605889#L2805 assume !(2 == isFloorCalling_~floorID#1); 1605765#L2809 assume !(3 == isFloorCalling_~floorID#1); 1605766#L2813 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606157#L2824 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1605967#L2429 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1605092#L1813 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1605093#L2797-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606261#L2824-2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1607022#L1786-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1604765#L1161-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1604766#L1182-1 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1; 1605084#L1793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1605085#L1798-1 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1607920#L1830 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1607958#L1966 assume !(0 != timeShift_~tmp___9~2#1); 1607842#L2057 assume 1 == ~doorState~0;~doorState~0 := 0; 1606275#L2057-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1604537#L2797-3 assume !(0 == isFloorCalling_~floorID#1); 1604538#L2801-3 assume !(1 == isFloorCalling_~floorID#1); 1606954#L2805-3 assume !(2 == isFloorCalling_~floorID#1); 1607175#L2809-3 assume !(3 == isFloorCalling_~floorID#1); 1606748#L2813-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1604958#L2824-3 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1604959#L2429-1 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1608055#L1696 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1607589#L1144-1 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1605212#L1709 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1607373#L2065 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1605114#L1753 assume !(1 == ~currentHeading~0); 1605115#L1763 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1607224#L1763-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1607654#L1769-1 assume { :end_inline_continueInDirection } true; 1605785#L2074-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1605786#L1144-3 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1606003#L2593 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1606005#L2607 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1604902#L2609 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1604903#L1153-1 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1611275#L2613 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1611271#L2653 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1611259#L2089 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1611256#L207-2 assume !false; 1611257#L208 [2022-11-25 18:36:08,883 INFO L750 eck$LassoCheckResult]: Loop: 1611257#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1626705#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1626704#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1626703#L215 assume 1 != cleanup_~tmp___0~0#1; 1626702#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1626701#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1626700#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1622415#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1622406#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1622405#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1622404#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1622403#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1622402#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1622401#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1622400#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1622399#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1622398#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1622397#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1622396#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617919#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1617911#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617906#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1617780#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1617777#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1617774#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1617775#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1617767#L2057-3 assume !(1 == ~doorState~0); 1617764#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1617762#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1617760#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1617758#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1617735#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1617732#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1617729#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1617726#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1617722#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1617702#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1617699#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1617693#L2065-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1617695#L1753-3 assume !(1 == ~currentHeading~0); 1630782#L1763-9 assume !(0 == ~currentFloorID~0); 1620506#L1763-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1617573#L1769-7 assume { :end_inline_continueInDirection } true; 1630775#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1630601#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1630595#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1630593#L2607-1 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 1630592#L2622-1 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1630591#L2637-1 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1630586#L2652-1 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1630584#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1630582#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1630580#L207-2 assume !false; 1630578#L208 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1630575#L211 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1630543#L990 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1630542#L215 assume 1 != cleanup_~tmp___0~0#1; 1630541#L215-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret47#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~14#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~14#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret42#1, anyStopRequested_#t~ret43#1, anyStopRequested_#t~ret44#1, anyStopRequested_#t~ret45#1, anyStopRequested_#t~ret46#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~13#1, anyStopRequested_~tmp___0~2#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~13#1;havoc anyStopRequested_~tmp___0~2#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1630540#L2797-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1630539#L2824-25 anyStopRequested_#t~ret42#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret42#1;havoc anyStopRequested_#t~ret42#1; 1630538#L1252 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1605372#L1316 isIdle_#t~ret47#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~14#1 := isIdle_#t~ret47#1;havoc isIdle_#t~ret47#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~14#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1607026#L1329 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1607376#L227 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret81#1, timeShift_#t~ret82#1, timeShift_#t~ret83#1, timeShift_#t~ret84#1, timeShift_#t~ret85#1, timeShift_#t~ret86#1, timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_~tmp~21#1, timeShift_~tmp___0~8#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~21#1;havoc timeShift_~tmp___0~8#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1, stopRequestedAtCurrentFloor_#t~ret66#1, stopRequestedAtCurrentFloor_#t~ret67#1, stopRequestedAtCurrentFloor_#t~ret68#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~19#1, stopRequestedAtCurrentFloor_~tmp___0~6#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~19#1;havoc stopRequestedAtCurrentFloor_~tmp___0~6#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1605336#L2797-30 assume !(0 == isFloorCalling_~floorID#1); 1605337#L2801-30 assume !(1 == isFloorCalling_~floorID#1); 1605908#L2805-30 assume !(2 == isFloorCalling_~floorID#1); 1604835#L2809-30 assume !(3 == isFloorCalling_~floorID#1); 1604795#L2813-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1604796#L2824-30 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1605423#L2429-3 stopRequestedAtCurrentFloor_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~19#1 := stopRequestedAtCurrentFloor_#t~ret65#1;havoc stopRequestedAtCurrentFloor_#t~ret65#1; 1605008#L1813-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~19#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret64#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~18#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1605009#L2797-32 assume !(0 == isFloorCalling_~floorID#1); 1607556#L2801-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606129#L2824-32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret63#1; 1632009#L1786-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~5#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; 1604875#L1798-3 stopRequestedAtCurrentFloor_#t~ret68#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret68#1;havoc stopRequestedAtCurrentFloor_#t~ret68#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1604876#L1830-1 timeShift_#t~ret81#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret81#1;havoc timeShift_#t~ret81#1; 1608048#L1966-2 assume !(0 != timeShift_~tmp___9~2#1); 1606593#L2057-3 assume !(1 == ~doorState~0); 1606594#L2057-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1606825#L2797-33 assume !(0 == isFloorCalling_~floorID#1); 1605016#L2801-33 assume !(1 == isFloorCalling_~floorID#1); 1605017#L2805-33 assume !(2 == isFloorCalling_~floorID#1); 1605869#L2809-33 assume !(3 == isFloorCalling_~floorID#1); 1606415#L2813-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1606675#L2824-33 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1607492#L2429-4 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1607493#L1696-2 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1604655#L1144-5 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1604656#L1709-2 timeShift_#t~ret88#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret88#1;havoc timeShift_#t~ret88#1; 1626781#L2065-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1626780#L1839-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1626778#L1844-2 timeShift_#t~ret89#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret59#1, stopRequestedInDirection_#t~ret60#1, stopRequestedInDirection_#t~ret61#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~16#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~16#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret118#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1626777#L2797-44 assume !(0 == isFloorCalling_~floorID#1); 1626774#L2801-44 assume !(1 == isFloorCalling_~floorID#1); 1626773#L2805-44 assume !(2 == isFloorCalling_~floorID#1); 1626771#L2809-44 assume !(3 == isFloorCalling_~floorID#1); 1626770#L2813-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1626767#L2824-44 isExecutiveFloorCalling_#t~ret118#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret118#1;havoc isExecutiveFloorCalling_#t~ret118#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1626766#L2429-5 stopRequestedInDirection_#t~ret59#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~4#1 := stopRequestedInDirection_#t~ret59#1;havoc stopRequestedInDirection_#t~ret59#1; 1626763#L1696-3 assume 0 != stopRequestedInDirection_~tmp___0~4#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1626741#L1144-6 stopRequestedInDirection_#t~ret60#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~16#1 := stopRequestedInDirection_#t~ret60#1;havoc stopRequestedInDirection_#t~ret60#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~16#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1626740#L1709-3 timeShift_#t~ret90#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret90#1;havoc timeShift_#t~ret90#1; 1626739#L2074-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1626738#L1839-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1626737#L1844-3 timeShift_#t~ret91#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret91#1;havoc timeShift_#t~ret91#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret62#1, continueInDirection_~dir#1, continueInDirection_~tmp~17#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~17#1;~currentHeading~0 := continueInDirection_~dir#1; 1626735#L1753-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 1626734#L3371-8 continueInDirection_#t~ret62#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~17#1 := continueInDirection_#t~ret62#1;havoc continueInDirection_#t~ret62#1; 1626733#L1757-12 assume !(0 != continueInDirection_~tmp~17#1); 1626732#L1763-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1626731#L1769-9 assume { :end_inline_continueInDirection } true; 1626730#L2074-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret125#1, __utac_acc__Specification2_spec__3_#t~ret126#1, __utac_acc__Specification2_spec__3_#t~ret127#1, __utac_acc__Specification2_spec__3_#t~ret128#1, __utac_acc__Specification2_spec__3_#t~ret129#1, __utac_acc__Specification2_spec__3_#t~ret130#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~25#1, __utac_acc__Specification2_spec__3_~tmp___0~12#1, __utac_acc__Specification2_spec__3_~tmp___1~8#1, __utac_acc__Specification2_spec__3_~tmp___2~6#1, __utac_acc__Specification2_spec__3_~tmp___3~5#1, __utac_acc__Specification2_spec__3_~tmp___4~3#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~25#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~12#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~8#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~6#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~5#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~3#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1626729#L1144-7 __utac_acc__Specification2_spec__3_#t~ret125#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~25#1 := __utac_acc__Specification2_spec__3_#t~ret125#1;havoc __utac_acc__Specification2_spec__3_#t~ret125#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~25#1; 1626728#L2593-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1626724#L2607-1 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1626722#L2609-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~10#1;havoc areDoorsOpen_~retValue_acc~10#1;areDoorsOpen_~retValue_acc~10#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~10#1; 1626723#L1153-6 __utac_acc__Specification2_spec__3_#t~ret127#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~5#1 := __utac_acc__Specification2_spec__3_#t~ret127#1;havoc __utac_acc__Specification2_spec__3_#t~ret127#1; 1626710#L2613-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~5#1;~floorButtons_spc2_1~0 := 0; 1626708#L2653-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1626707#L2089-1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1626706#L207-2 assume !false; 1611257#L208 [2022-11-25 18:36:08,883 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:08,883 INFO L85 PathProgramCache]: Analyzing trace with hash 1818737528, now seen corresponding path program 1 times [2022-11-25 18:36:08,883 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:08,883 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2134540481] [2022-11-25 18:36:08,883 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:08,884 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:08,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:08,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-11-25 18:36:08,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:08,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2134540481] [2022-11-25 18:36:08,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2134540481] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:08,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:08,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-11-25 18:36:08,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314716475] [2022-11-25 18:36:08,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:08,978 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-11-25 18:36:08,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-11-25 18:36:08,979 INFO L85 PathProgramCache]: Analyzing trace with hash 20903488, now seen corresponding path program 1 times [2022-11-25 18:36:08,979 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-11-25 18:36:08,979 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496264574] [2022-11-25 18:36:08,979 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-11-25 18:36:08,980 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-11-25 18:36:08,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-11-25 18:36:09,090 INFO L134 CoverageAnalysis]: Checked inductivity of 46 backedges. 26 proven. 0 refuted. 0 times theorem prover too weak. 20 trivial. 0 not checked. [2022-11-25 18:36:09,090 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-11-25 18:36:09,090 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496264574] [2022-11-25 18:36:09,091 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496264574] provided 1 perfect and 0 imperfect interpolant sequences [2022-11-25 18:36:09,091 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-11-25 18:36:09,091 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-11-25 18:36:09,091 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1109359404] [2022-11-25 18:36:09,091 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-11-25 18:36:09,092 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-11-25 18:36:09,092 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-11-25 18:36:09,092 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-11-25 18:36:09,092 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-11-25 18:36:09,092 INFO L87 Difference]: Start difference. First operand 27550 states and 49504 transitions. cyclomatic complexity: 21960 Second operand has 6 states, 6 states have (on average 12.166666666666666) internal successors, (73), 5 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-11-25 18:36:09,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-11-25 18:36:09,699 INFO L93 Difference]: Finished difference Result 45418 states and 82205 transitions. [2022-11-25 18:36:09,699 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 45418 states and 82205 transitions. [2022-11-25 18:36:09,834 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 25114 [2022-11-25 18:36:09,929 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 45418 states to 45418 states and 82205 transitions. [2022-11-25 18:36:09,929 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28704 [2022-11-25 18:36:09,946 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28704 [2022-11-25 18:36:09,947 INFO L73 IsDeterministic]: Start isDeterministic. Operand 45418 states and 82205 transitions. [2022-11-25 18:36:09,947 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-11-25 18:36:09,947 INFO L218 hiAutomatonCegarLoop]: Abstraction has 45418 states and 82205 transitions. [2022-11-25 18:36:09,968 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 45418 states and 82205 transitions.