./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash b90339f9090766921b1c16763101e1e0bf56713d98b802bfaa51b02dabc40a61 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 18:15:23,757 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 18:15:23,759 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 18:15:23,772 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 18:15:23,772 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 18:15:23,773 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 18:15:23,774 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 18:15:23,775 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 18:15:23,776 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 18:15:23,777 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 18:15:23,777 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 18:15:23,778 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 18:15:23,778 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 18:15:23,779 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 18:15:23,780 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 18:15:23,781 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 18:15:23,781 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 18:15:23,782 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 18:15:23,783 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 18:15:23,784 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 18:15:23,785 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 18:15:23,786 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 18:15:23,787 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 18:15:23,788 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 18:15:23,790 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 18:15:23,790 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 18:15:23,790 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 18:15:23,791 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 18:15:23,791 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 18:15:23,792 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 18:15:23,792 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 18:15:23,793 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 18:15:23,793 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 18:15:23,794 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 18:15:23,794 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 18:15:23,795 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 18:15:23,795 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 18:15:23,795 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 18:15:23,795 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 18:15:23,796 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 18:15:23,796 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 18:15:23,797 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 18:15:23,822 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 18:15:23,822 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 18:15:23,822 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 18:15:23,822 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 18:15:23,823 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 18:15:23,823 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 18:15:23,823 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 18:15:23,823 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 18:15:23,823 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 18:15:23,823 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 18:15:23,824 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 18:15:23,824 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 18:15:23,825 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 18:15:23,826 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 18:15:23,826 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 18:15:23,826 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 18:15:23,826 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 18:15:23,827 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 18:15:23,827 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> b90339f9090766921b1c16763101e1e0bf56713d98b802bfaa51b02dabc40a61 [2022-12-13 18:15:24,024 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 18:15:24,045 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 18:15:24,047 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 18:15:24,049 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 18:15:24,049 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 18:15:24,050 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c [2022-12-13 18:15:26,600 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 18:15:26,860 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 18:15:26,861 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c [2022-12-13 18:15:26,871 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/data/b5eb00d42/fd8810effe31484585ab080e6be4b6dc/FLAG8e6ac9bfa [2022-12-13 18:15:27,171 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/data/b5eb00d42/fd8810effe31484585ab080e6be4b6dc [2022-12-13 18:15:27,173 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 18:15:27,175 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 18:15:27,176 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 18:15:27,176 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 18:15:27,179 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 18:15:27,180 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,180 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@795f656c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27, skipping insertion in model container [2022-12-13 18:15:27,181 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,187 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 18:15:27,239 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 18:15:27,463 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c[35415,35428] [2022-12-13 18:15:27,535 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 18:15:27,546 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 18:15:27,586 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/sv-benchmarks/c/product-lines/elevator_spec1_product27.cil.c[35415,35428] [2022-12-13 18:15:27,614 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 18:15:27,642 INFO L208 MainTranslator]: Completed translation [2022-12-13 18:15:27,643 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27 WrapperNode [2022-12-13 18:15:27,643 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 18:15:27,644 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 18:15:27,644 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 18:15:27,644 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 18:15:27,649 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,672 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,764 INFO L138 Inliner]: procedures = 95, calls = 343, calls flagged for inlining = 196, calls inlined = 324, statements flattened = 9541 [2022-12-13 18:15:27,764 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 18:15:27,765 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 18:15:27,765 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 18:15:27,765 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 18:15:27,772 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,772 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,789 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,789 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,848 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,887 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,897 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,908 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,924 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 18:15:27,925 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 18:15:27,925 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 18:15:27,925 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 18:15:27,926 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (1/1) ... [2022-12-13 18:15:27,931 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:27,939 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:27,950 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:27,952 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 18:15:27,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 18:15:27,986 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 18:15:27,986 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 18:15:27,986 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 18:15:28,110 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 18:15:28,112 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 18:15:30,990 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 18:15:31,012 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 18:15:31,013 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-13 18:15:31,017 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 06:15:31 BoogieIcfgContainer [2022-12-13 18:15:31,017 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 18:15:31,018 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 18:15:31,018 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 18:15:31,022 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 18:15:31,022 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 18:15:31,022 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 06:15:27" (1/3) ... [2022-12-13 18:15:31,023 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4f31ae40 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 06:15:31, skipping insertion in model container [2022-12-13 18:15:31,023 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 18:15:31,023 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 06:15:27" (2/3) ... [2022-12-13 18:15:31,024 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4f31ae40 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 06:15:31, skipping insertion in model container [2022-12-13 18:15:31,024 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 18:15:31,024 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 06:15:31" (3/3) ... [2022-12-13 18:15:31,025 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product27.cil.c [2022-12-13 18:15:31,103 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 18:15:31,103 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 18:15:31,103 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 18:15:31,103 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 18:15:31,103 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 18:15:31,103 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 18:15:31,103 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 18:15:31,104 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 18:15:31,118 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2662 states, 2661 states have (on average 1.8583239383690342) internal successors, (4945), 2661 states have internal predecessors, (4945), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:31,200 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1283 [2022-12-13 18:15:31,201 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:31,201 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:31,215 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:31,215 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:31,215 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 18:15:31,221 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2662 states, 2661 states have (on average 1.8583239383690342) internal successors, (4945), 2661 states have internal predecessors, (4945), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:31,251 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1283 [2022-12-13 18:15:31,251 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:31,251 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:31,255 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:31,255 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:31,262 INFO L748 eck$LassoCheckResult]: Stem: 195#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2546#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1037#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 621#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 786#valid_product_returnLabel#1true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2057#L399true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1764#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2094#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 495#L493true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 206#getOrigin_returnLabel#1true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 422#L932true assume 0 == initPersonOnFloor_~floor#1; 2524#L933true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1649#L1040-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1804#L1654true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2575#L1666-2true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1384#L724true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1257#L736-2true assume { :end_inline_callOnFloor } true; 1137#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 465#bigMacCall_returnLabel#1true assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 320#L493-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 432#getOrigin_returnLabel#2true angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 648#L932-1true assume 0 == initPersonOnFloor_~floor#1; 2344#L933-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 2570#L1040-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1089#L1654-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1617#L1666-5true assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1535#L724-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2299#L736-5true assume { :end_inline_callOnFloor } true; 1142#initPersonOnFloor_returnLabel#2true assume { :end_inline_initPersonOnFloor } true; 832#angelinaCall_returnLabel#1true assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1789#L656true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 86#isFloorCalling_returnLabel#1true isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1865#isExecutiveFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 970#L2820true assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1221#getCurrentFloorID_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1343#L2824true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 289#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1745#L2972true assume !(0 != timeShift_~tmp___9~2#1); 631#L3063true assume !(1 == ~doorState~0); 2526#L3063-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1589#L656-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 441#isFloorCalling_returnLabel#4true isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1102#isExecutiveFloorCalling_returnLabel#2true stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 114#L2703true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1542#getCurrentFloorID_returnLabel#2true stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1876#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 1509#L3071true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 1518#L2760true assume !(1 == ~currentHeading~0); 982#L2770true assume !(0 == ~currentFloorID~0); 521#L2770-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 442#L2776-1true assume { :end_inline_continueInDirection } true; 221#L3080-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2464#getCurrentFloorID_returnLabel#4true __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 248#L1692true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1797#L1693true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 835#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1234#L1697true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2637#L1752true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2224#timeShift_returnLabel#1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2594#L198-2true [2022-12-13 18:15:31,264 INFO L750 eck$LassoCheckResult]: Loop: 2594#L198-2true assume !false; 2212#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 584#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1027#isBlocked_returnLabel#1true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 707#L206true assume 1 != cleanup_~tmp___0~0#1; 2261#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 461#L656-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1196#isFloorCalling_returnLabel#26true anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 2473#L2259true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 157#anyStopRequested_returnLabel#1true isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1283#isIdle_returnLabel#1true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 903#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 969#L656-30true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1924#isFloorCalling_returnLabel#31true isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1661#isExecutiveFloorCalling_returnLabel#4true stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 582#L2820-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1222#getCurrentFloorID_returnLabel#5true stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1917#L2824-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2308#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1885#L2972-2true assume !(0 != timeShift_~tmp___9~2#1); 388#L3063-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1493#L3063-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 529#L656-33true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1862#isFloorCalling_returnLabel#34true isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 126#isExecutiveFloorCalling_returnLabel#5true stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1176#L2703-2true assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1192#getCurrentFloorID_returnLabel#6true stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1332#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 1474#L3071-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 828#L2760-3true assume !(1 == ~currentHeading~0); 2426#L2770-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1516#L2770-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2144#L2776-7true assume { :end_inline_continueInDirection } true; 2334#L3080-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 893#getCurrentFloorID_returnLabel#8true __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 813#L1692-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1824#L1693-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1601#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 871#L1697-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1926#L1752-1true assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2263#timeShift_returnLabel#2true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2594#L198-2true [2022-12-13 18:15:31,268 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:31,268 INFO L85 PathProgramCache]: Analyzing trace with hash 1324070951, now seen corresponding path program 1 times [2022-12-13 18:15:31,275 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:31,275 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [131501923] [2022-12-13 18:15:31,276 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:31,276 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:31,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:31,558 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:31,559 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:31,559 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [131501923] [2022-12-13 18:15:31,560 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [131501923] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:31,560 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:31,560 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:15:31,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [842346341] [2022-12-13 18:15:31,562 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:31,566 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:31,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:31,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1418101182, now seen corresponding path program 1 times [2022-12-13 18:15:31,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:31,568 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [239771115] [2022-12-13 18:15:31,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:31,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:31,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:31,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:31,689 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:31,689 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [239771115] [2022-12-13 18:15:31,689 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [239771115] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:31,689 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:31,689 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:15:31,690 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1532667583] [2022-12-13 18:15:31,690 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:31,691 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:31,691 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:31,715 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 18:15:31,715 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:15:31,720 INFO L87 Difference]: Start difference. First operand has 2662 states, 2661 states have (on average 1.8583239383690342) internal successors, (4945), 2661 states have internal predecessors, (4945), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 5.857142857142857) internal successors, (41), 7 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:34,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:34,733 INFO L93 Difference]: Finished difference Result 19795 states and 36532 transitions. [2022-12-13 18:15:34,734 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19795 states and 36532 transitions. [2022-12-13 18:15:34,844 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9472 [2022-12-13 18:15:34,917 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19795 states to 19615 states and 36336 transitions. [2022-12-13 18:15:34,918 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19615 [2022-12-13 18:15:34,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19615 [2022-12-13 18:15:34,943 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19615 states and 36336 transitions. [2022-12-13 18:15:34,966 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 18:15:34,966 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19615 states and 36336 transitions. [2022-12-13 18:15:34,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19615 states and 36336 transitions. [2022-12-13 18:15:35,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19615 to 7477. [2022-12-13 18:15:35,182 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7477 states, 7477 states have (on average 1.8546208372341848) internal successors, (13867), 7476 states have internal predecessors, (13867), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:35,204 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7477 states to 7477 states and 13867 transitions. [2022-12-13 18:15:35,205 INFO L240 hiAutomatonCegarLoop]: Abstraction has 7477 states and 13867 transitions. [2022-12-13 18:15:35,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-13 18:15:35,210 INFO L428 stractBuchiCegarLoop]: Abstraction has 7477 states and 13867 transitions. [2022-12-13 18:15:35,211 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 18:15:35,211 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 7477 states and 13867 transitions. [2022-12-13 18:15:35,244 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 3758 [2022-12-13 18:15:35,244 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:35,244 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:35,247 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:35,248 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:35,248 INFO L748 eck$LassoCheckResult]: Stem: 22947#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 22948#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 24287#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23713#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 23714#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 23957#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 24968#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 24969#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 23505#L493 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 22967#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 22968#L932 assume 0 == initPersonOnFloor_~floor#1; 23382#L933 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22514#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 24879#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 23197#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24653#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22965#L736-2 assume { :end_inline_callOnFloor } true; 24408#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 23458#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 23190#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 23191#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23401#L932-1 assume 0 == initPersonOnFloor_~floor#1; 23758#L933-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22831#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 24355#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 24356#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24784#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 22749#L736-5 assume { :end_inline_callOnFloor } true; 24412#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 24024#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 24025#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 24981#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 25312#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 25310#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 25308#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 25297#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 25298#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 28748#L2972 assume !(0 != timeShift_~tmp___9~2#1); 28749#L3063 assume !(1 == ~doorState~0); 29833#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 29832#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 29831#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29830#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 29828#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 29829#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 29837#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 29835#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 29834#L2760 assume !(1 == ~currentHeading~0); 24221#L2770 assume !(0 == ~currentFloorID~0); 23548#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 23419#L2776-1 assume { :end_inline_continueInDirection } true; 22997#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 22998#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 23050#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 23051#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 24028#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 24029#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 22952#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 25287#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 28000#L198-2 [2022-12-13 18:15:35,249 INFO L750 eck$LassoCheckResult]: Loop: 28000#L198-2 assume !false; 27999#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 27998#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 27997#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 27996#L206 assume 1 != cleanup_~tmp___0~0#1; 27995#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 23453#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 23454#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 25262#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 22873#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 22874#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 24118#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 24119#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 24206#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 24887#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 23650#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 23651#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 25516#L2824-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 25055#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 29488#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 29489#L3063-3 assume 1 == ~doorState~0;~doorState~0 := 0; 29901#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 29900#L656-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 29899#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 29898#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 24448#L2703-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 24449#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 29897#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 24722#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 24723#L2760-3 assume !(1 == ~currentHeading~0); 25251#L2770-9 assume !(0 == ~currentFloorID~0); 24769#L2770-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 24770#L2776-7 assume { :end_inline_continueInDirection } true; 23604#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 28920#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 28919#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 28912#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 28911#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 28908#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 28899#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 28001#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 28000#L198-2 [2022-12-13 18:15:35,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:35,250 INFO L85 PathProgramCache]: Analyzing trace with hash 1324070951, now seen corresponding path program 2 times [2022-12-13 18:15:35,250 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:35,250 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [666418075] [2022-12-13 18:15:35,251 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:35,251 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:35,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:35,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:35,358 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:35,358 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [666418075] [2022-12-13 18:15:35,358 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [666418075] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:35,358 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:35,359 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:15:35,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068290681] [2022-12-13 18:15:35,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:35,359 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:35,360 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:35,360 INFO L85 PathProgramCache]: Analyzing trace with hash -717036604, now seen corresponding path program 1 times [2022-12-13 18:15:35,361 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:35,361 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116591101] [2022-12-13 18:15:35,361 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:35,361 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:35,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:35,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:35,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:35,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2116591101] [2022-12-13 18:15:35,397 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2116591101] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:35,397 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:35,397 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:15:35,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081096537] [2022-12-13 18:15:35,398 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:35,398 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:35,398 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:35,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:15:35,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:15:35,399 INFO L87 Difference]: Start difference. First operand 7477 states and 13867 transitions. cyclomatic complexity: 6392 Second operand has 3 states, 3 states have (on average 13.666666666666666) internal successors, (41), 3 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:35,542 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:35,542 INFO L93 Difference]: Finished difference Result 11267 states and 20855 transitions. [2022-12-13 18:15:35,542 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11267 states and 20855 transitions. [2022-12-13 18:15:35,602 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7488 [2022-12-13 18:15:35,629 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11267 states to 11267 states and 20855 transitions. [2022-12-13 18:15:35,629 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11267 [2022-12-13 18:15:35,635 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11267 [2022-12-13 18:15:35,636 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11267 states and 20855 transitions. [2022-12-13 18:15:35,644 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 18:15:35,644 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11267 states and 20855 transitions. [2022-12-13 18:15:35,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11267 states and 20855 transitions. [2022-12-13 18:15:35,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11267 to 11259. [2022-12-13 18:15:35,747 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11259 states, 11259 states have (on average 1.8512301270095035) internal successors, (20843), 11258 states have internal predecessors, (20843), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:35,791 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11259 states to 11259 states and 20843 transitions. [2022-12-13 18:15:35,791 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11259 states and 20843 transitions. [2022-12-13 18:15:35,792 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 18:15:35,792 INFO L428 stractBuchiCegarLoop]: Abstraction has 11259 states and 20843 transitions. [2022-12-13 18:15:35,792 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 18:15:35,793 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11259 states and 20843 transitions. [2022-12-13 18:15:35,814 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 7480 [2022-12-13 18:15:35,814 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:35,814 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:35,816 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:35,816 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:35,816 INFO L748 eck$LassoCheckResult]: Stem: 41697#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 41698#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 43031#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 42469#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 42470#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 42703#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 43681#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 43682#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 42256#L493 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 41719#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 41720#L932 assume 0 == initPersonOnFloor_~floor#1; 42132#L933 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 41265#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 43598#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 41951#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 43384#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41715#L736-2 assume { :end_inline_callOnFloor } true; 43147#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 42209#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 41941#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 41942#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 42153#L932-1 assume 0 == initPersonOnFloor_~floor#1; 42513#L933-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 41583#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 43094#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 43095#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 43506#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 41503#L736-5 assume { :end_inline_callOnFloor } true; 43150#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 42768#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 42769#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 41469#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 41470#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 42953#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 42954#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 43235#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 43356#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 49445#L2972 assume !(0 != timeShift_~tmp___9~2#1); 49446#L3063 assume !(1 == ~doorState~0); 49776#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 49773#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 49772#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 49769#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 49767#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 43516#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 42381#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 43486#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 43487#L2760 assume !(1 == ~currentHeading~0); 42964#L2770 assume !(0 == ~currentFloorID~0); 42965#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 48437#L2776-1 assume { :end_inline_continueInDirection } true; 48436#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 48435#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 48434#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 48432#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 48433#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 48415#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 48409#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 48350#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 48349#L198-2 [2022-12-13 18:15:35,817 INFO L750 eck$LassoCheckResult]: Loop: 48349#L198-2 assume !false; 48348#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 48325#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 48322#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 48319#L206 assume 1 != cleanup_~tmp___0~0#1; 48314#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 48312#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 48311#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 48267#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 48253#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 48238#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 48236#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 48234#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 44032#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 48231#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 48229#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 48230#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 52463#L2824-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 43719#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 43748#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 42069#L3063-3 assume 1 == ~doorState~0;~doorState~0 := 0; 42070#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 42314#L656-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 42315#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 41552#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 41553#L2703-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 43185#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 42690#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 43346#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 42761#L2760-3 assume !(1 == ~currentHeading~0); 42762#L2770-9 assume !(0 == ~currentFloorID~0); 43492#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 43493#L2776-7 assume { :end_inline_continueInDirection } true; 42357#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 48388#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 48386#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 48384#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 48385#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 48363#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 48353#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 48351#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 48349#L198-2 [2022-12-13 18:15:35,817 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:35,817 INFO L85 PathProgramCache]: Analyzing trace with hash 931043941, now seen corresponding path program 1 times [2022-12-13 18:15:35,817 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:35,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [998503722] [2022-12-13 18:15:35,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:35,818 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:35,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:35,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:35,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:35,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [998503722] [2022-12-13 18:15:35,870 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [998503722] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:35,870 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:35,870 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:15:35,870 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [372875727] [2022-12-13 18:15:35,870 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:35,871 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:35,871 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:35,871 INFO L85 PathProgramCache]: Analyzing trace with hash -1110063614, now seen corresponding path program 1 times [2022-12-13 18:15:35,872 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:35,872 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [325021248] [2022-12-13 18:15:35,872 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:35,872 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:35,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:35,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:35,929 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:35,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [325021248] [2022-12-13 18:15:35,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [325021248] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:35,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:35,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:15:35,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2061042724] [2022-12-13 18:15:35,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:35,931 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:35,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:35,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:15:35,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:15:35,932 INFO L87 Difference]: Start difference. First operand 11259 states and 20843 transitions. cyclomatic complexity: 9586 Second operand has 5 states, 5 states have (on average 8.2) internal successors, (41), 5 states have internal predecessors, (41), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:36,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:36,330 INFO L93 Difference]: Finished difference Result 40268 states and 74241 transitions. [2022-12-13 18:15:36,330 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40268 states and 74241 transitions. [2022-12-13 18:15:36,460 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 35358 [2022-12-13 18:15:36,549 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40268 states to 40268 states and 74241 transitions. [2022-12-13 18:15:36,549 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40268 [2022-12-13 18:15:36,594 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40268 [2022-12-13 18:15:36,594 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40268 states and 74241 transitions. [2022-12-13 18:15:36,616 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 18:15:36,616 INFO L218 hiAutomatonCegarLoop]: Abstraction has 40268 states and 74241 transitions. [2022-12-13 18:15:36,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40268 states and 74241 transitions. [2022-12-13 18:15:36,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40268 to 14264. [2022-12-13 18:15:36,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14264 states, 14264 states have (on average 1.8391054402692093) internal successors, (26233), 14263 states have internal predecessors, (26233), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:36,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14264 states to 14264 states and 26233 transitions. [2022-12-13 18:15:36,899 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14264 states and 26233 transitions. [2022-12-13 18:15:36,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 18:15:36,900 INFO L428 stractBuchiCegarLoop]: Abstraction has 14264 states and 26233 transitions. [2022-12-13 18:15:36,900 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 18:15:36,900 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14264 states and 26233 transitions. [2022-12-13 18:15:36,940 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 9548 [2022-12-13 18:15:36,940 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:36,940 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:36,942 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:36,943 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:36,943 INFO L748 eck$LassoCheckResult]: Stem: 93248#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 93249#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 94612#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 94030#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 94031#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 94277#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 95329#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 95330#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 93814#L493 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 93270#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 93271#L932 assume 0 == initPersonOnFloor_~floor#1; 93687#L933 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 92811#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 95234#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 93502#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 94986#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 93266#L736-2 assume { :end_inline_callOnFloor } true; 94737#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 93766#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 93495#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 93496#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 93708#L932-1 assume 0 == initPersonOnFloor_~floor#1; 94075#L933-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 93130#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 94679#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 94680#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 95129#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 93050#L736-5 assume { :end_inline_callOnFloor } true; 94740#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 94344#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 94345#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 95345#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 95694#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 95693#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 95692#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 95690#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 95691#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 95311#L2972 assume !(0 != timeShift_~tmp___9~2#1); 95313#L3063 assume !(1 == ~doorState~0); 95780#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 101587#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 101586#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 95777#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 95778#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 95850#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 95851#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 95842#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 95844#L2760 assume !(1 == ~currentHeading~0); 94545#L2770 assume !(0 == ~currentFloorID~0); 94546#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 93726#L2776-1 assume { :end_inline_continueInDirection } true; 93298#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 93299#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 93353#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 93354#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 94348#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 94349#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 103877#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 103875#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 103874#L198-2 [2022-12-13 18:15:36,943 INFO L750 eck$LassoCheckResult]: Loop: 103874#L198-2 assume !false; 103873#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 103872#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 103871#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 103870#L206 assume 1 != cleanup_~tmp___0~0#1; 103869#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 103864#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 103862#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 103846#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 103837#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 103836#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 103835#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 103834#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 98571#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 103833#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 103827#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 103822#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 103819#L2824-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 103820#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 104202#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 104201#L3063-3 assume !(1 == ~doorState~0); 104196#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 104195#L656-33 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 104185#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 104131#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 104094#L2703-2 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 104093#getCurrentFloorID_returnLabel#6 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 104092#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 104090#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 104091#L2760-3 assume !(1 == ~currentHeading~0); 103222#L2770-9 assume !(0 == ~currentFloorID~0); 103201#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 103194#L2776-7 assume { :end_inline_continueInDirection } true; 104031#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 104030#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 104026#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 104022#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 104021#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 104018#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 104008#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 103876#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 103874#L198-2 [2022-12-13 18:15:36,944 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:36,944 INFO L85 PathProgramCache]: Analyzing trace with hash 931043941, now seen corresponding path program 2 times [2022-12-13 18:15:36,944 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:36,944 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [563948449] [2022-12-13 18:15:36,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:36,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:36,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:37,003 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:37,003 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:37,003 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [563948449] [2022-12-13 18:15:37,004 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [563948449] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:37,004 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:37,004 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:15:37,004 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [867362113] [2022-12-13 18:15:37,004 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:37,005 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:37,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:37,005 INFO L85 PathProgramCache]: Analyzing trace with hash -687361788, now seen corresponding path program 1 times [2022-12-13 18:15:37,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:37,006 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [468989707] [2022-12-13 18:15:37,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:37,006 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:37,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:15:37,016 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 18:15:37,024 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:15:37,044 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 18:15:38,109 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 18:15:38,109 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 18:15:38,109 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 18:15:38,110 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 18:15:38,110 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-12-13 18:15:38,110 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,110 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 18:15:38,110 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 18:15:38,110 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product27.cil.c_Iteration4_Loop [2022-12-13 18:15:38,110 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 18:15:38,110 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 18:15:38,133 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,140 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,142 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,143 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,150 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,152 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,153 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,154 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,156 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,159 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,165 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,167 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,169 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,172 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,173 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,175 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,176 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,180 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,181 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,183 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,185 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,186 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,197 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,199 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,200 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,202 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,206 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,208 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,209 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,210 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,213 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,215 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,216 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,218 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,219 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,221 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,224 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,226 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,228 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,229 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,231 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,232 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,233 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,235 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,236 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,237 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,239 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,240 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,244 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,246 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,257 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,258 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,262 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,264 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,268 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,269 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,274 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,275 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,277 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,278 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,279 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,280 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,281 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,283 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,284 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,285 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,286 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,288 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,289 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,290 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,292 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:38,786 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 18:15:38,786 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-12-13 18:15:38,788 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,788 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,789 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,790 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-12-13 18:15:38,791 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,791 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,805 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,805 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret82#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret82#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,809 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:38,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,809 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,810 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,811 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-12-13 18:15:38,813 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,813 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,824 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,824 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret77#1=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret77#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,827 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2022-12-13 18:15:38,827 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,828 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,828 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,829 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-12-13 18:15:38,831 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,831 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,842 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,842 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret97#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret97#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,845 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:38,845 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,845 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,846 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,847 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-12-13 18:15:38,848 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,848 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,871 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,871 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_areDoorsOpen_#res#1=3, ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___4~0#1=3, ~doorState~0=3, ULTIMATE.start_areDoorsOpen_~retValue_acc~15#1=3} Honda state: {ULTIMATE.start_areDoorsOpen_#res#1=3, ULTIMATE.start___utac_acc__Specification1_spec__3_~tmp___4~0#1=3, ~doorState~0=3, ULTIMATE.start_areDoorsOpen_~retValue_acc~15#1=3} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,873 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-12-13 18:15:38,874 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,874 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,875 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,875 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-12-13 18:15:38,877 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,877 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,888 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,889 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret75#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret75#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,891 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-12-13 18:15:38,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,891 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,892 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-12-13 18:15:38,894 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,894 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,905 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,906 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,908 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:38,908 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,908 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,909 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,910 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-12-13 18:15:38,911 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,911 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,922 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,923 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret81#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret81#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,925 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2022-12-13 18:15:38,925 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,925 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,926 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,927 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-12-13 18:15:38,928 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,928 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,941 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,941 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret96#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret96#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,944 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2022-12-13 18:15:38,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,945 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,946 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-12-13 18:15:38,947 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,947 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,966 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,966 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls#1=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:38,970 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-12-13 18:15:38,970 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:38,970 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:38,971 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:38,972 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-12-13 18:15:38,974 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:38,974 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:38,998 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:38,998 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Honda state: {ULTIMATE.start_continueInDirection_#in~dir#1=6, ULTIMATE.start_stopRequestedInDirection_#in~dir#1=6, ULTIMATE.start_continueInDirection_~dir#1=6, ULTIMATE.start_stopRequestedInDirection_~dir#1=6, ~currentHeading~0=6} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,001 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2022-12-13 18:15:39,001 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,001 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,002 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,003 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-12-13 18:15:39,004 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,004 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,015 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,016 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~retValue_acc~20#1=0} Honda state: {ULTIMATE.start_isIdle_~retValue_acc~20#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,018 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2022-12-13 18:15:39,018 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,018 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,019 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,020 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-12-13 18:15:39,021 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,021 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,032 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,032 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~2#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,034 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2022-12-13 18:15:39,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,035 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,035 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,036 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-12-13 18:15:39,037 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,037 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,055 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,055 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp~6#1=0, ULTIMATE.start_isIdle_#res#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp~6#1=0, ULTIMATE.start_isIdle_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,057 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,058 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,058 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,058 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,059 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-12-13 18:15:39,061 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,061 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,073 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,073 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp~26#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp~26#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,076 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,076 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,076 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,077 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,077 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-12-13 18:15:39,078 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,078 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,090 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,090 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,092 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2022-12-13 18:15:39,093 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,093 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,093 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,094 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-12-13 18:15:39,095 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,096 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,106 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-12-13 18:15:39,107 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret100#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret100#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-12-13 18:15:39,109 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2022-12-13 18:15:39,109 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,110 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,110 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,111 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-12-13 18:15:39,112 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-12-13 18:15:39,113 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,126 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,127 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,127 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,128 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-12-13 18:15:39,130 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-12-13 18:15:39,130 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-12-13 18:15:39,161 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-12-13 18:15:39,164 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2022-12-13 18:15:39,164 INFO L210 LassoAnalysis]: Preferences: [2022-12-13 18:15:39,164 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-12-13 18:15:39,164 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-12-13 18:15:39,165 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-12-13 18:15:39,165 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-12-13 18:15:39,165 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,165 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-12-13 18:15:39,165 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-12-13 18:15:39,165 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec1_product27.cil.c_Iteration4_Loop [2022-12-13 18:15:39,165 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-12-13 18:15:39,165 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-12-13 18:15:39,167 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,169 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,170 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,175 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,176 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,179 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,181 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,182 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,183 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,184 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,187 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,190 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,195 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,196 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,197 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,201 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,207 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,208 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,210 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,219 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,220 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,223 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,224 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,226 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,227 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,228 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,229 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,231 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,233 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,234 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,235 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,236 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,237 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,239 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,240 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,241 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,245 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,246 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,249 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,250 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,251 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,252 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,253 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,255 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,256 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,257 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,259 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,260 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,268 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,269 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,271 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,272 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,273 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,274 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,275 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,276 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,279 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,281 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,285 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,287 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,292 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,293 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,294 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,296 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,297 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,298 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,299 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,300 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,302 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,303 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,304 INFO L117 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-12-13 18:15:39,762 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-12-13 18:15:39,765 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-12-13 18:15:39,766 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,766 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,767 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,768 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-12-13 18:15:39,769 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,779 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,779 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,780 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,780 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,780 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,781 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,781 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,783 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,785 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2022-12-13 18:15:39,786 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,786 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,786 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,787 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-12-13 18:15:39,789 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,798 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,799 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,799 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,799 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,799 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,799 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,799 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,800 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,803 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2022-12-13 18:15:39,803 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,803 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,804 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,805 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-12-13 18:15:39,806 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,816 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,816 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,816 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,816 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,816 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,817 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,817 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,818 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,820 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2022-12-13 18:15:39,820 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,821 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,821 INFO L229 MonitoredProcess]: Starting monitored process 23 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,822 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-12-13 18:15:39,823 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,833 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,833 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,833 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,833 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,833 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,834 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,834 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,835 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,838 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2022-12-13 18:15:39,838 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,838 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,839 INFO L229 MonitoredProcess]: Starting monitored process 24 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,840 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-12-13 18:15:39,841 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,850 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,851 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,851 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,851 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,851 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,852 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,852 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,853 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,856 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2022-12-13 18:15:39,856 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,856 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,857 INFO L229 MonitoredProcess]: Starting monitored process 25 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,857 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-12-13 18:15:39,859 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,869 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,869 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,869 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,869 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,869 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,870 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,870 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,871 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,873 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,874 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,874 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,875 INFO L229 MonitoredProcess]: Starting monitored process 26 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,875 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-12-13 18:15:39,877 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,887 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,887 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,887 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,887 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,887 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,887 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,887 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,889 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,891 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,891 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,892 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,892 INFO L229 MonitoredProcess]: Starting monitored process 27 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,893 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-12-13 18:15:39,894 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,904 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,904 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,904 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,904 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,905 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,905 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,905 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,906 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,909 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,909 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,910 INFO L229 MonitoredProcess]: Starting monitored process 28 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,910 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-12-13 18:15:39,912 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,922 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,922 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,922 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,922 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,922 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,922 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,923 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,924 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,926 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:39,926 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,927 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,927 INFO L229 MonitoredProcess]: Starting monitored process 29 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,928 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-12-13 18:15:39,929 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,939 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,939 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,939 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,939 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,939 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,940 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,940 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,942 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,944 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2022-12-13 18:15:39,944 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,944 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,945 INFO L229 MonitoredProcess]: Starting monitored process 30 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,945 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-12-13 18:15:39,947 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,957 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,957 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,957 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,957 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,958 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,959 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:39,959 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,962 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,964 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2022-12-13 18:15:39,964 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,964 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,965 INFO L229 MonitoredProcess]: Starting monitored process 31 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,966 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-12-13 18:15:39,967 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,977 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,977 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,978 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,978 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-12-13 18:15:39,978 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:39,980 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-12-13 18:15:39,980 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:39,983 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:39,985 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2022-12-13 18:15:39,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:39,986 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:39,986 INFO L229 MonitoredProcess]: Starting monitored process 32 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:39,987 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-12-13 18:15:39,989 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:39,999 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:39,999 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:39,999 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:39,999 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:39,999 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,000 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,000 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,001 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,003 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:40,003 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,003 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,004 INFO L229 MonitoredProcess]: Starting monitored process 33 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,005 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-12-13 18:15:40,006 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,016 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,016 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,016 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,016 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:40,016 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,017 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,017 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,018 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,020 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2022-12-13 18:15:40,020 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,020 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,021 INFO L229 MonitoredProcess]: Starting monitored process 34 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,022 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-12-13 18:15:40,023 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,033 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,034 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,034 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,034 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:40,034 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,035 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,035 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,037 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2022-12-13 18:15:40,040 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,040 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,041 INFO L229 MonitoredProcess]: Starting monitored process 35 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,042 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-12-13 18:15:40,043 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,053 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,053 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,054 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,054 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-12-13 18:15:40,054 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,057 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-12-13 18:15:40,057 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,060 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,062 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2022-12-13 18:15:40,063 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,063 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,063 INFO L229 MonitoredProcess]: Starting monitored process 36 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,064 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-12-13 18:15:40,066 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,075 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,075 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,075 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,076 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:40,076 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,076 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,076 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,077 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,080 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2022-12-13 18:15:40,080 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,080 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,081 INFO L229 MonitoredProcess]: Starting monitored process 37 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,082 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-12-13 18:15:40,083 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,093 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,093 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,093 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,093 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:40,093 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,094 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,094 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,095 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-12-13 18:15:40,097 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2022-12-13 18:15:40,097 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,098 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,098 INFO L229 MonitoredProcess]: Starting monitored process 38 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,099 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-12-13 18:15:40,100 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-12-13 18:15:40,111 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-12-13 18:15:40,111 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-12-13 18:15:40,111 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-12-13 18:15:40,111 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-12-13 18:15:40,111 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-12-13 18:15:40,113 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-12-13 18:15:40,113 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-12-13 18:15:40,117 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-12-13 18:15:40,121 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-12-13 18:15:40,121 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-12-13 18:15:40,123 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 18:15:40,123 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 18:15:40,144 INFO L229 MonitoredProcess]: Starting monitored process 39 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 18:15:40,145 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-12-13 18:15:40,146 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-12-13 18:15:40,146 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-12-13 18:15:40,146 INFO L513 LassoAnalysis]: Proved termination. [2022-12-13 18:15:40,147 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-12-13 18:15:40,149 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2022-12-13 18:15:40,150 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-12-13 18:15:40,164 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:40,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:40,255 INFO L263 TraceCheckSpWp]: Trace formula consists of 662 conjuncts, 2 conjunts are in the unsatisfiable core [2022-12-13 18:15:40,257 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 18:15:40,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:40,352 INFO L263 TraceCheckSpWp]: Trace formula consists of 154 conjuncts, 8 conjunts are in the unsatisfiable core [2022-12-13 18:15:40,354 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-12-13 18:15:40,365 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_5c962ce1-1417-4922-8c40-a4c35176f410/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2022-12-13 18:15:40,454 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:40,459 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2022-12-13 18:15:40,461 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 14264 states and 26233 transitions. cyclomatic complexity: 11971 Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:41,412 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 14264 states and 26233 transitions. cyclomatic complexity: 11971. Second operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 41821 states and 76981 transitions. Complement of second has 11 states. [2022-12-13 18:15:41,414 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 6 states 1 stem states 4 non-accepting loop states 1 accepting loop states [2022-12-13 18:15:41,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 14.285714285714286) internal successors, (100), 7 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:41,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 7161 transitions. [2022-12-13 18:15:41,429 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 7161 transitions. Stem has 59 letters. Loop has 41 letters. [2022-12-13 18:15:41,432 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 18:15:41,432 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 7161 transitions. Stem has 100 letters. Loop has 41 letters. [2022-12-13 18:15:41,433 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 18:15:41,433 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 6 states and 7161 transitions. Stem has 59 letters. Loop has 82 letters. [2022-12-13 18:15:41,436 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-12-13 18:15:41,436 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41821 states and 76981 transitions. [2022-12-13 18:15:41,652 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21237 [2022-12-13 18:15:41,834 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41821 states to 41821 states and 76981 transitions. [2022-12-13 18:15:41,834 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27740 [2022-12-13 18:15:41,864 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28141 [2022-12-13 18:15:41,865 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41821 states and 76981 transitions. [2022-12-13 18:15:41,866 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:41,867 INFO L218 hiAutomatonCegarLoop]: Abstraction has 41821 states and 76981 transitions. [2022-12-13 18:15:41,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41821 states and 76981 transitions. [2022-12-13 18:15:42,433 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41821 to 41206. [2022-12-13 18:15:42,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41206 states, 41206 states have (on average 1.8445614716303451) internal successors, (76007), 41205 states have internal predecessors, (76007), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:42,551 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41206 states to 41206 states and 76007 transitions. [2022-12-13 18:15:42,551 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41206 states and 76007 transitions. [2022-12-13 18:15:42,551 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:42,552 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:15:42,552 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:15:42,552 INFO L87 Difference]: Start difference. First operand 41206 states and 76007 transitions. Second operand has 3 states, 3 states have (on average 19.666666666666668) internal successors, (59), 3 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:42,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:42,997 INFO L93 Difference]: Finished difference Result 82341 states and 151880 transitions. [2022-12-13 18:15:42,997 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82341 states and 151880 transitions. [2022-12-13 18:15:43,293 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 42150 [2022-12-13 18:15:43,458 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82341 states to 82341 states and 151880 transitions. [2022-12-13 18:15:43,459 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55073 [2022-12-13 18:15:43,507 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55073 [2022-12-13 18:15:43,507 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82341 states and 151880 transitions. [2022-12-13 18:15:43,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:43,507 INFO L218 hiAutomatonCegarLoop]: Abstraction has 82341 states and 151880 transitions. [2022-12-13 18:15:43,542 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82341 states and 151880 transitions. [2022-12-13 18:15:43,996 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82341 to 41206. [2022-12-13 18:15:44,028 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41206 states, 41206 states have (on average 1.8444158617677038) internal successors, (76001), 41205 states have internal predecessors, (76001), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:44,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41206 states to 41206 states and 76001 transitions. [2022-12-13 18:15:44,087 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41206 states and 76001 transitions. [2022-12-13 18:15:44,087 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 18:15:44,088 INFO L428 stractBuchiCegarLoop]: Abstraction has 41206 states and 76001 transitions. [2022-12-13 18:15:44,088 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 18:15:44,088 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41206 states and 76001 transitions. [2022-12-13 18:15:44,219 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:44,219 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:44,219 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:44,221 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:44,222 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:44,222 INFO L748 eck$LassoCheckResult]: Stem: 273412#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 273413#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 275510#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 274599#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 274600#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 274969#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 276603#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 276604#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 274269#L493 assume !(0 == getOrigin_~person#1); 274270#L497 assume !(1 == getOrigin_~person#1); 274399#L501 assume !(2 == getOrigin_~person#1); 274400#L505 assume !(3 == getOrigin_~person#1); 273953#L509 assume !(4 == getOrigin_~person#1); 273954#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 273443#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 273444#L932 assume 0 == initPersonOnFloor_~floor#1; 274075#L933 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 272785#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 276453#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 273806#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 276080#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 273435#L736-2 assume { :end_inline_callOnFloor } true; 275708#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 274197#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 273795#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 273796#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 274104#L932-1 assume 0 == initPersonOnFloor_~floor#1; 274670#L933-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 273244#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 275617#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 275618#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 276289#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 273124#L736-5 assume { :end_inline_callOnFloor } true; 275712#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 275081#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 275082#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 273074#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 273075#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 275383#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 275384#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 277224#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 273695#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 273696#L2972 assume !(0 != timeShift_~tmp___9~2#1); 274629#L3063 assume !(1 == ~doorState~0); 274631#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 285783#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 285782#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 285781#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 273157#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 273158#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 284916#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 284914#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 284912#L2760 assume !(1 == ~currentHeading~0); 284913#L2770 assume !(0 == ~currentFloorID~0); 284881#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 284593#L2776-1 assume { :end_inline_continueInDirection } true; 290810#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 290809#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 290808#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 290807#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 275086#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 275087#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 273419#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 277000#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 277001#L198-2 assume !false; 291505#L199 [2022-12-13 18:15:44,222 INFO L750 eck$LassoCheckResult]: Loop: 291505#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 301943#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 301937#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 301935#L206 assume 1 != cleanup_~tmp___0~0#1; 301913#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 301900#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 301899#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 301870#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 301860#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 301858#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 301856#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 301854#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 294313#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 301852#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 301835#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 301821#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 301806#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 301794#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 301787#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 301784#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 301780#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 301781#L2974-2 assume !(0 != ~persons_0~0); 308315#L2974-3 assume !(0 != ~persons_1~0); 308259#L2988-1 assume !(0 != ~persons_2~0); 308256#L3002-1 assume !(0 != ~persons_3~0); 308235#L3016-1 assume !(0 != ~persons_4~0); 308233#L3030-1 assume !(0 != ~persons_5~0); 308229#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 308227#L752-12 assume 0 == isPersonOnFloor_~floor#1; 308220#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 308188#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 308186#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 308184#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 308183#L752-14 assume 0 == isPersonOnFloor_~floor#1; 308154#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 308141#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 308137#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 308136#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 308135#L752-16 assume 0 == isPersonOnFloor_~floor#1; 306558#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 306544#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 306542#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 306540#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 306539#L752-18 assume 0 == isPersonOnFloor_~floor#1; 306523#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 306499#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 306496#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 306494#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 306493#L752-20 assume 0 == isPersonOnFloor_~floor#1; 306470#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 306443#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 306441#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 306439#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 306438#L752-22 assume 0 == isPersonOnFloor_~floor#1; 306330#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 306328#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 306326#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 306324#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 306322#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 306318#L703-41 assume { :end_inline_resetCallOnFloor } true; 306317#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 306315#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 302005#L2134-5 assume { :end_inline_resetFloorButton } true; 302000#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 301993#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 301981#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 301979#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 301973#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 301963#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 301954#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 301952#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 301950#L198-2 assume !false; 291505#L199 [2022-12-13 18:15:44,223 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:44,223 INFO L85 PathProgramCache]: Analyzing trace with hash 1066504757, now seen corresponding path program 1 times [2022-12-13 18:15:44,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:44,223 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1519025942] [2022-12-13 18:15:44,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:44,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:44,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:44,364 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:44,364 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:44,364 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1519025942] [2022-12-13 18:15:44,364 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1519025942] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:44,364 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:44,364 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:15:44,364 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655301372] [2022-12-13 18:15:44,365 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:44,365 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:44,365 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:44,365 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 1 times [2022-12-13 18:15:44,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:44,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [343734264] [2022-12-13 18:15:44,366 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:44,366 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:44,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:44,439 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:44,439 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:44,439 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [343734264] [2022-12-13 18:15:44,439 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [343734264] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:44,440 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:44,440 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:44,440 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357469968] [2022-12-13 18:15:44,440 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:44,440 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:44,440 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:44,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:15:44,441 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:15:44,441 INFO L87 Difference]: Start difference. First operand 41206 states and 76001 transitions. cyclomatic complexity: 34804 Second operand has 6 states, 6 states have (on average 10.833333333333334) internal successors, (65), 6 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:45,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:45,042 INFO L93 Difference]: Finished difference Result 123428 states and 227662 transitions. [2022-12-13 18:15:45,042 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 123428 states and 227662 transitions. [2022-12-13 18:15:45,531 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 63225 [2022-12-13 18:15:45,897 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 123428 states to 123428 states and 227662 transitions. [2022-12-13 18:15:45,897 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82526 [2022-12-13 18:15:45,959 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82526 [2022-12-13 18:15:45,959 INFO L73 IsDeterministic]: Start isDeterministic. Operand 123428 states and 227662 transitions. [2022-12-13 18:15:45,964 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:45,964 INFO L218 hiAutomatonCegarLoop]: Abstraction has 123428 states and 227662 transitions. [2022-12-13 18:15:46,032 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123428 states and 227662 transitions. [2022-12-13 18:15:46,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123428 to 41202. [2022-12-13 18:15:46,820 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41202 states, 41202 states have (on average 1.8443279452453765) internal successors, (75990), 41201 states have internal predecessors, (75990), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:46,877 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41202 states to 41202 states and 75990 transitions. [2022-12-13 18:15:46,878 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41202 states and 75990 transitions. [2022-12-13 18:15:46,878 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:15:46,879 INFO L428 stractBuchiCegarLoop]: Abstraction has 41202 states and 75990 transitions. [2022-12-13 18:15:46,879 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 18:15:46,879 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41202 states and 75990 transitions. [2022-12-13 18:15:46,946 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:46,946 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:46,946 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:46,948 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:46,948 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:46,948 INFO L748 eck$LassoCheckResult]: Stem: 438065#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 438066#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 440155#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 439241#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 439242#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 439612#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 441222#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 441223#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 438913#L493 assume !(0 == getOrigin_~person#1); 438914#L497 assume !(1 == getOrigin_~person#1); 439042#L501 assume !(2 == getOrigin_~person#1); 439043#L505 assume !(3 == getOrigin_~person#1); 438603#L509 assume !(4 == getOrigin_~person#1); 438604#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 438091#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 438092#L932 assume !(0 == initPersonOnFloor_~floor#1); 438724#L959 assume 1 == initPersonOnFloor_~floor#1; 440028#L960 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 437443#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 441079#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 438452#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 440718#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 438088#L736-2 assume { :end_inline_callOnFloor } true; 440355#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 438841#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 438441#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 438442#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 439314#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 439315#L959-1 assume 1 == initPersonOnFloor_~floor#1; 441005#L960-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 437902#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 440265#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 440266#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 440920#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 437778#L736-5 assume { :end_inline_callOnFloor } true; 440363#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 439718#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 439719#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 437732#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 437733#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 440019#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 440020#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 441837#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 441838#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 441203#L2972 assume !(0 != timeShift_~tmp___9~2#1); 441205#L3063 assume !(1 == ~doorState~0); 449190#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 449767#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 449766#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 449765#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 449764#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 449163#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 441346#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 440885#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 440887#L2760 assume !(1 == ~currentHeading~0); 440039#L2770 assume !(0 == ~currentFloorID~0); 440040#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 438775#L2776-1 assume { :end_inline_continueInDirection } true; 438138#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 438139#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 441766#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 456150#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 452079#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 451976#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 438070#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 441615#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 441616#L198-2 assume !false; 453403#L199 [2022-12-13 18:15:46,948 INFO L750 eck$LassoCheckResult]: Loop: 453403#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 467560#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 467559#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 467558#L206 assume 1 != cleanup_~tmp___0~0#1; 467557#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 467551#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 467548#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 467532#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 467523#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 467522#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 467521#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 467516#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 458723#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 467514#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 467512#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 467513#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 471466#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 471458#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 471457#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 471455#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 471454#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 441351#L2974-2 assume !(0 != ~persons_0~0); 478286#L2974-3 assume !(0 != ~persons_1~0); 478264#L2988-1 assume !(0 != ~persons_2~0); 478262#L3002-1 assume !(0 != ~persons_3~0); 478102#L3016-1 assume !(0 != ~persons_4~0); 438122#L3030-1 assume !(0 != ~persons_5~0); 438089#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 437565#L752-12 assume 0 == isPersonOnFloor_~floor#1; 437566#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 437431#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 438001#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 437891#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 437892#L752-14 assume 0 == isPersonOnFloor_~floor#1; 439638#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 437520#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 440105#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 439505#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 439506#L752-16 assume 0 == isPersonOnFloor_~floor#1; 439912#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 437554#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 441636#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 441158#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 438286#L752-18 assume 0 == isPersonOnFloor_~floor#1; 438287#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 438004#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 438142#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 438144#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 438854#L752-20 assume 0 == isPersonOnFloor_~floor#1; 438907#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 437514#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 439739#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 439557#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 439648#L752-22 assume 0 == isPersonOnFloor_~floor#1; 439649#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 437658#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 437879#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 437606#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 438032#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 438211#L703-41 assume { :end_inline_resetCallOnFloor } true; 439688#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 439689#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 467621#L2134-5 assume { :end_inline_resetFloorButton } true; 467618#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 467617#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 467616#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 467584#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 467582#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 467579#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 467565#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 467562#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 467561#L198-2 assume !false; 453403#L199 [2022-12-13 18:15:46,948 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:46,949 INFO L85 PathProgramCache]: Analyzing trace with hash -1812870589, now seen corresponding path program 1 times [2022-12-13 18:15:46,949 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:46,949 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505817970] [2022-12-13 18:15:46,949 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:46,949 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:46,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:47,007 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:47,008 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:47,008 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505817970] [2022-12-13 18:15:47,008 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [505817970] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:47,008 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:47,008 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:15:47,008 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2038488428] [2022-12-13 18:15:47,008 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:47,009 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:47,009 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:47,009 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 2 times [2022-12-13 18:15:47,009 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:47,009 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1803414908] [2022-12-13 18:15:47,009 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:47,009 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:47,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:47,074 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:47,074 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:47,074 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1803414908] [2022-12-13 18:15:47,075 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1803414908] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:47,075 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:47,075 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:47,075 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599021387] [2022-12-13 18:15:47,075 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:47,075 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:47,075 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:47,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:15:47,076 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:15:47,076 INFO L87 Difference]: Start difference. First operand 41202 states and 75990 transitions. cyclomatic complexity: 34797 Second operand has 4 states, 4 states have (on average 16.75) internal successors, (67), 4 states have internal predecessors, (67), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:47,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:47,443 INFO L93 Difference]: Finished difference Result 82331 states and 151843 transitions. [2022-12-13 18:15:47,443 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82331 states and 151843 transitions. [2022-12-13 18:15:47,694 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 42150 [2022-12-13 18:15:47,978 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82331 states to 82331 states and 151843 transitions. [2022-12-13 18:15:47,978 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55063 [2022-12-13 18:15:48,008 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55063 [2022-12-13 18:15:48,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82331 states and 151843 transitions. [2022-12-13 18:15:48,010 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:48,011 INFO L218 hiAutomatonCegarLoop]: Abstraction has 82331 states and 151843 transitions. [2022-12-13 18:15:48,043 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82331 states and 151843 transitions. [2022-12-13 18:15:48,521 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82331 to 41202. [2022-12-13 18:15:48,552 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41202 states, 41202 states have (on average 1.844109509247124) internal successors, (75981), 41201 states have internal predecessors, (75981), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:48,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41202 states to 41202 states and 75981 transitions. [2022-12-13 18:15:48,637 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41202 states and 75981 transitions. [2022-12-13 18:15:48,637 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:15:48,638 INFO L428 stractBuchiCegarLoop]: Abstraction has 41202 states and 75981 transitions. [2022-12-13 18:15:48,638 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 18:15:48,638 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41202 states and 75981 transitions. [2022-12-13 18:15:48,743 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:48,743 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:48,743 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:48,744 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:48,745 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:48,745 INFO L748 eck$LassoCheckResult]: Stem: 561617#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 561618#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 563679#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562785#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 562786#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 563147#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 564710#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 564711#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 562456#L493 assume !(0 == getOrigin_~person#1); 562457#L497 assume !(1 == getOrigin_~person#1); 562583#L501 assume !(2 == getOrigin_~person#1); 562584#L505 assume !(3 == getOrigin_~person#1); 562148#L509 assume !(4 == getOrigin_~person#1); 562149#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 561647#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 561648#L932 assume !(0 == initPersonOnFloor_~floor#1); 562268#L959 assume 1 == initPersonOnFloor_~floor#1; 563560#L960 assume !(0 == initPersonOnFloor_~person#1); 564620#L963 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 560991#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 564573#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 562001#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 564223#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 561640#L736-2 assume { :end_inline_callOnFloor } true; 563874#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 562384#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 561990#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 561991#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 562296#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 562854#L959-1 assume 1 == initPersonOnFloor_~floor#1; 564504#L960-2 assume !(0 == initPersonOnFloor_~person#1); 564505#L963-2 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 561450#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 563788#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 563789#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 564422#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 561330#L736-5 assume { :end_inline_callOnFloor } true; 563878#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 563255#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 563256#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 561280#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 561281#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 563556#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 563557#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 565253#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 565254#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 564691#L2972 assume !(0 != timeShift_~tmp___9~2#1); 562815#L3063 assume !(1 == ~doorState~0); 562817#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 573035#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 573032#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 573031#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 573030#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 564438#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 562652#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 564389#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 564391#L2760 assume !(1 == ~currentHeading~0); 563571#L2770 assume !(0 == ~currentFloorID~0); 562520#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 562317#L2776-1 assume { :end_inline_continueInDirection } true; 562156#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 579073#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 579069#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 579065#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 579059#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 579041#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 579039#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 579037#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 579034#L198-2 assume !false; 579035#L199 [2022-12-13 18:15:48,745 INFO L750 eck$LassoCheckResult]: Loop: 579035#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 591416#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 591415#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 591414#L206 assume 1 != cleanup_~tmp___0~0#1; 591413#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 591412#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 591411#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 591395#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 591386#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 591385#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 591384#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 591383#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 582202#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 591382#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 591380#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 591381#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 597066#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 597063#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 590590#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 590588#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 590586#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 590587#L2974-2 assume !(0 != ~persons_0~0); 597990#L2974-3 assume !(0 != ~persons_1~0); 597954#L2988-1 assume !(0 != ~persons_2~0); 597912#L3002-1 assume !(0 != ~persons_3~0); 597873#L3016-1 assume !(0 != ~persons_4~0); 597871#L3030-1 assume !(0 != ~persons_5~0); 596789#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 592009#L752-12 assume 0 == isPersonOnFloor_~floor#1; 592002#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591970#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 591968#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 591966#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 591965#L752-14 assume 0 == isPersonOnFloor_~floor#1; 591936#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591923#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 591919#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 591918#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 591917#L752-16 assume 0 == isPersonOnFloor_~floor#1; 591878#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591864#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 591862#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 591860#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 591859#L752-18 assume 0 == isPersonOnFloor_~floor#1; 591836#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591816#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 591814#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 591812#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 591811#L752-20 assume 0 == isPersonOnFloor_~floor#1; 591800#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591773#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 591771#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 591769#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 591768#L752-22 assume 0 == isPersonOnFloor_~floor#1; 591451#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 591449#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 591447#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 591445#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 591441#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 591437#L703-41 assume { :end_inline_resetCallOnFloor } true; 591436#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 591434#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 591430#L2134-5 assume { :end_inline_resetFloorButton } true; 591429#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 591428#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 591427#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 591426#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 590684#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 591424#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 590669#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 591418#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 591417#L198-2 assume !false; 579035#L199 [2022-12-13 18:15:48,746 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:48,746 INFO L85 PathProgramCache]: Analyzing trace with hash -1330857003, now seen corresponding path program 1 times [2022-12-13 18:15:48,746 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:48,746 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [445360276] [2022-12-13 18:15:48,746 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:48,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:48,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:48,827 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:48,827 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:48,827 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [445360276] [2022-12-13 18:15:48,827 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [445360276] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:48,828 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:48,828 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:15:48,828 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [903707030] [2022-12-13 18:15:48,828 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:48,828 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:48,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:48,829 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 3 times [2022-12-13 18:15:48,829 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:48,829 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496226572] [2022-12-13 18:15:48,829 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:48,829 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:48,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:48,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:48,927 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:48,928 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496226572] [2022-12-13 18:15:48,928 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496226572] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:48,928 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:48,928 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:48,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [71581501] [2022-12-13 18:15:48,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:48,929 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:48,929 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:48,929 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:15:48,929 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:15:48,929 INFO L87 Difference]: Start difference. First operand 41202 states and 75981 transitions. cyclomatic complexity: 34788 Second operand has 4 states, 4 states have (on average 17.25) internal successors, (69), 4 states have internal predecessors, (69), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:49,378 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:49,378 INFO L93 Difference]: Finished difference Result 82331 states and 151830 transitions. [2022-12-13 18:15:49,378 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82331 states and 151830 transitions. [2022-12-13 18:15:49,757 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 42150 [2022-12-13 18:15:49,945 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82331 states to 82331 states and 151830 transitions. [2022-12-13 18:15:49,945 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55063 [2022-12-13 18:15:49,973 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55063 [2022-12-13 18:15:49,973 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82331 states and 151830 transitions. [2022-12-13 18:15:49,974 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:49,974 INFO L218 hiAutomatonCegarLoop]: Abstraction has 82331 states and 151830 transitions. [2022-12-13 18:15:50,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82331 states and 151830 transitions. [2022-12-13 18:15:50,434 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82331 to 41202. [2022-12-13 18:15:50,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41202 states, 41202 states have (on average 1.8438910732488714) internal successors, (75972), 41201 states have internal predecessors, (75972), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:50,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41202 states to 41202 states and 75972 transitions. [2022-12-13 18:15:50,520 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41202 states and 75972 transitions. [2022-12-13 18:15:50,521 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:15:50,521 INFO L428 stractBuchiCegarLoop]: Abstraction has 41202 states and 75972 transitions. [2022-12-13 18:15:50,521 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 18:15:50,521 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41202 states and 75972 transitions. [2022-12-13 18:15:50,601 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:50,601 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:50,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:50,603 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:50,603 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:50,604 INFO L748 eck$LassoCheckResult]: Stem: 685163#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 685164#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 687238#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 686335#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 686336#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 686703#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 688283#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 688284#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 686004#L493 assume !(0 == getOrigin_~person#1); 686005#L497 assume !(1 == getOrigin_~person#1); 686132#L501 assume !(2 == getOrigin_~person#1); 686133#L505 assume !(3 == getOrigin_~person#1); 685693#L509 assume !(4 == getOrigin_~person#1); 685694#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 685193#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 685194#L932 assume !(0 == initPersonOnFloor_~floor#1); 685813#L959 assume 1 == initPersonOnFloor_~floor#1; 687113#L960 assume !(0 == initPersonOnFloor_~person#1); 688193#L963 assume !(1 == initPersonOnFloor_~person#1); 684538#L966 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 684539#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 688145#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 685547#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 687792#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 685186#L736-2 assume { :end_inline_callOnFloor } true; 687431#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 685930#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 685537#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 685538#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 685841#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 686403#L959-1 assume 1 == initPersonOnFloor_~floor#1; 688075#L960-2 assume !(0 == initPersonOnFloor_~person#1); 688076#L963-2 assume !(1 == initPersonOnFloor_~person#1); 688370#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 684999#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 687346#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 687347#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 687989#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 684879#L736-5 assume { :end_inline_callOnFloor } true; 687435#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 686811#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 686812#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 684829#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 684830#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 687109#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 687110#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 688876#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 685439#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 685440#L2972 assume !(0 != timeShift_~tmp___9~2#1); 686365#L3063 assume !(1 == ~doorState~0); 686367#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 688074#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 685860#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 685861#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 687369#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 696344#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 697057#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 697056#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 697054#L2760 assume !(1 == ~currentHeading~0); 697055#L2770 assume !(0 == ~currentFloorID~0); 696955#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 696953#L2776-1 assume { :end_inline_continueInDirection } true; 703476#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 703475#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 703474#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 703472#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 703473#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 703444#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 703442#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 703440#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 703438#L198-2 assume !false; 703439#L199 [2022-12-13 18:15:50,604 INFO L750 eck$LassoCheckResult]: Loop: 703439#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 713858#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 713857#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 713851#L206 assume 1 != cleanup_~tmp___0~0#1; 713848#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 713841#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 713842#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 713799#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 713788#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 713773#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 713771#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 713769#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 705941#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 713768#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 714663#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 714664#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 714967#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 713706#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 713707#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 713694#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 713695#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 714640#L2974-2 assume !(0 != ~persons_0~0); 718657#L2974-3 assume !(0 != ~persons_1~0); 718636#L2988-1 assume !(0 != ~persons_2~0); 718634#L3002-1 assume !(0 != ~persons_3~0); 718598#L3016-1 assume !(0 != ~persons_4~0); 718590#L3030-1 assume !(0 != ~persons_5~0); 718585#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 718584#L752-12 assume 0 == isPersonOnFloor_~floor#1; 718574#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 718542#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 718540#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 718538#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 718537#L752-14 assume 0 == isPersonOnFloor_~floor#1; 718495#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 718488#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 718437#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 718435#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 718434#L752-16 assume 0 == isPersonOnFloor_~floor#1; 718378#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 718359#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 718356#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 718352#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 718351#L752-18 assume 0 == isPersonOnFloor_~floor#1; 718335#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 718316#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 717385#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 717380#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 717378#L752-20 assume 0 == isPersonOnFloor_~floor#1; 715526#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 715499#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 715497#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 715495#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 715494#L752-22 assume 0 == isPersonOnFloor_~floor#1; 715451#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 715449#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 715447#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 715445#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 715443#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 715439#L703-41 assume { :end_inline_resetCallOnFloor } true; 715438#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 715436#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 715432#L2134-5 assume { :end_inline_resetFloorButton } true; 715431#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 715430#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 715429#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 715428#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 713898#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 713880#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 713871#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 713860#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 713859#L198-2 assume !false; 703439#L199 [2022-12-13 18:15:50,604 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:50,604 INFO L85 PathProgramCache]: Analyzing trace with hash -1614735495, now seen corresponding path program 1 times [2022-12-13 18:15:50,605 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:50,605 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6534288] [2022-12-13 18:15:50,605 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:50,605 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:50,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:50,680 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:50,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:50,680 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6534288] [2022-12-13 18:15:50,680 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [6534288] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:50,680 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:50,680 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:15:50,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [188358826] [2022-12-13 18:15:50,681 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:50,681 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:50,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:50,681 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 4 times [2022-12-13 18:15:50,681 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:50,681 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1051446657] [2022-12-13 18:15:50,682 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:50,682 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:50,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:50,753 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:50,753 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:50,753 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1051446657] [2022-12-13 18:15:50,753 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1051446657] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:50,754 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:50,754 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:50,754 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1875674491] [2022-12-13 18:15:50,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:50,754 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:50,754 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:50,755 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:15:50,755 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:15:50,755 INFO L87 Difference]: Start difference. First operand 41202 states and 75972 transitions. cyclomatic complexity: 34779 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:51,456 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:51,456 INFO L93 Difference]: Finished difference Result 164529 states and 303442 transitions. [2022-12-13 18:15:51,456 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 164529 states and 303442 transitions. [2022-12-13 18:15:51,927 INFO L131 ngComponentsAnalysis]: Automaton has 28 accepting balls. 84300 [2022-12-13 18:15:52,515 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 164529 states to 164529 states and 303442 transitions. [2022-12-13 18:15:52,515 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109993 [2022-12-13 18:15:52,594 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109993 [2022-12-13 18:15:52,595 INFO L73 IsDeterministic]: Start isDeterministic. Operand 164529 states and 303442 transitions. [2022-12-13 18:15:52,596 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:52,596 INFO L218 hiAutomatonCegarLoop]: Abstraction has 164529 states and 303442 transitions. [2022-12-13 18:15:52,679 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 164529 states and 303442 transitions. [2022-12-13 18:15:53,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 164529 to 41202. [2022-12-13 18:15:53,428 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41202 states, 41202 states have (on average 1.8437939905829814) internal successors, (75968), 41201 states have internal predecessors, (75968), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:53,522 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41202 states to 41202 states and 75968 transitions. [2022-12-13 18:15:53,522 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41202 states and 75968 transitions. [2022-12-13 18:15:53,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:15:53,523 INFO L428 stractBuchiCegarLoop]: Abstraction has 41202 states and 75968 transitions. [2022-12-13 18:15:53,523 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 18:15:53,524 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41202 states and 75968 transitions. [2022-12-13 18:15:53,645 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:53,645 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:53,645 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:53,647 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:53,647 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:53,647 INFO L748 eck$LassoCheckResult]: Stem: 890909#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 890910#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 893001#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 892082#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 892083#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 892461#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 894058#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 894059#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 891752#L493 assume !(0 == getOrigin_~person#1); 891753#L497 assume !(1 == getOrigin_~person#1); 891882#L501 assume !(2 == getOrigin_~person#1); 891883#L505 assume !(3 == getOrigin_~person#1); 891445#L509 assume !(4 == getOrigin_~person#1); 891446#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 890939#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 890940#L932 assume !(0 == initPersonOnFloor_~floor#1); 891564#L959 assume !(1 == initPersonOnFloor_~floor#1); 892877#L986 assume !(2 == initPersonOnFloor_~floor#1); 890782#L1013 assume !(3 == initPersonOnFloor_~floor#1); 890784#L1040 assume !(4 == initPersonOnFloor_~floor#1); 890875#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 893918#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 891294#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 893546#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 890932#L736-2 assume { :end_inline_callOnFloor } true; 893189#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 891679#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 891284#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 891285#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 891592#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 892153#L959-1 assume 1 == initPersonOnFloor_~floor#1; 893844#L960-2 assume !(0 == initPersonOnFloor_~person#1); 893845#L963-2 assume !(1 == initPersonOnFloor_~person#1); 894151#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 890743#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 893106#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 893107#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 893751#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 890623#L736-5 assume { :end_inline_callOnFloor } true; 893193#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 892567#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 892568#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 890573#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 890574#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 892872#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 892873#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 894650#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 894651#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 894038#L2972 assume !(0 != timeShift_~tmp___9~2#1); 894040#L3063 assume !(1 == ~doorState~0); 895047#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 902838#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 902837#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 902836#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 890656#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 890657#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 894176#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 894177#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 893728#L2760 assume !(1 == ~currentHeading~0); 893729#L2770 assume !(0 == ~currentFloorID~0); 894227#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 902520#L2776-1 assume { :end_inline_continueInDirection } true; 907510#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 907509#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 907508#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 907506#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 907507#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 907476#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 907474#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 907472#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 907470#L198-2 assume !false; 907471#L199 [2022-12-13 18:15:53,647 INFO L750 eck$LassoCheckResult]: Loop: 907471#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 920298#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 920297#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 920296#L206 assume 1 != cleanup_~tmp___0~0#1; 920295#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 920289#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 920286#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 920270#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 920261#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 920260#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 920259#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 920253#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 911805#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 920250#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 920248#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 920249#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 920335#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 920230#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 920229#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 920223#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 920219#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 920220#L2974-2 assume !(0 != ~persons_0~0); 922326#L2974-3 assume !(0 != ~persons_1~0); 922270#L2988-1 assume !(0 != ~persons_2~0); 922267#L3002-1 assume !(0 != ~persons_3~0); 922246#L3016-1 assume !(0 != ~persons_4~0); 922244#L3030-1 assume !(0 != ~persons_5~0); 922240#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 922238#L752-12 assume 0 == isPersonOnFloor_~floor#1; 922231#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 922199#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 922197#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 922195#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 922194#L752-14 assume 0 == isPersonOnFloor_~floor#1; 922165#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 922152#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 922148#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 922147#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 922146#L752-16 assume 0 == isPersonOnFloor_~floor#1; 922057#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 922043#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 922041#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 922039#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 922038#L752-18 assume 0 == isPersonOnFloor_~floor#1; 921160#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 921136#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 921133#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 921131#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 921130#L752-20 assume 0 == isPersonOnFloor_~floor#1; 921107#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 921080#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 921078#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 921076#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 921075#L752-22 assume 0 == isPersonOnFloor_~floor#1; 920821#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 920819#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 920817#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 920815#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 920813#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 920809#L703-41 assume { :end_inline_resetCallOnFloor } true; 920808#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 920806#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 920479#L2134-5 assume { :end_inline_resetFloorButton } true; 920474#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 920326#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 920323#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 920322#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 920320#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 920317#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 920303#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 920300#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 920299#L198-2 assume !false; 907471#L199 [2022-12-13 18:15:53,648 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:53,648 INFO L85 PathProgramCache]: Analyzing trace with hash -812332295, now seen corresponding path program 1 times [2022-12-13 18:15:53,648 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:53,648 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1613834609] [2022-12-13 18:15:53,648 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:53,648 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:53,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:53,736 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:53,736 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:53,736 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1613834609] [2022-12-13 18:15:53,737 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1613834609] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:53,737 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:53,737 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:15:53,737 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1912445441] [2022-12-13 18:15:53,737 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:53,738 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:53,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:53,738 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 5 times [2022-12-13 18:15:53,738 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:53,738 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1126678052] [2022-12-13 18:15:53,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:53,739 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:53,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:53,952 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:53,952 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:53,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1126678052] [2022-12-13 18:15:53,952 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1126678052] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:53,952 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:53,952 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:53,952 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [104781536] [2022-12-13 18:15:53,952 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:53,953 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:53,953 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:53,953 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:15:53,953 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:15:53,953 INFO L87 Difference]: Start difference. First operand 41202 states and 75968 transitions. cyclomatic complexity: 34775 Second operand has 4 states, 4 states have (on average 17.75) internal successors, (71), 4 states have internal predecessors, (71), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:54,382 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:15:54,382 INFO L93 Difference]: Finished difference Result 123388 states and 227563 transitions. [2022-12-13 18:15:54,382 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 123388 states and 227563 transitions. [2022-12-13 18:15:54,844 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 63225 [2022-12-13 18:15:55,312 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 123388 states to 123388 states and 227563 transitions. [2022-12-13 18:15:55,312 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82486 [2022-12-13 18:15:55,354 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82486 [2022-12-13 18:15:55,354 INFO L73 IsDeterministic]: Start isDeterministic. Operand 123388 states and 227563 transitions. [2022-12-13 18:15:55,359 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:15:55,359 INFO L218 hiAutomatonCegarLoop]: Abstraction has 123388 states and 227563 transitions. [2022-12-13 18:15:55,407 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123388 states and 227563 transitions. [2022-12-13 18:15:55,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123388 to 41184. [2022-12-13 18:15:55,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 41184 states, 41184 states have (on average 1.8438471250971251) internal successors, (75937), 41183 states have internal predecessors, (75937), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:15:55,933 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 41184 states to 41184 states and 75937 transitions. [2022-12-13 18:15:55,933 INFO L240 hiAutomatonCegarLoop]: Abstraction has 41184 states and 75937 transitions. [2022-12-13 18:15:55,933 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:15:55,934 INFO L428 stractBuchiCegarLoop]: Abstraction has 41184 states and 75937 transitions. [2022-12-13 18:15:55,934 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 18:15:55,934 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 41184 states and 75937 transitions. [2022-12-13 18:15:56,017 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 21075 [2022-12-13 18:15:56,017 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:15:56,017 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:15:56,018 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:56,019 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:15:56,019 INFO L748 eck$LassoCheckResult]: Stem: 1055510#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1055511#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1057597#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1056684#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 1056685#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1057062#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1058647#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1058648#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1056357#L493 assume !(0 == getOrigin_~person#1); 1056358#L497 assume !(1 == getOrigin_~person#1); 1056483#L501 assume !(2 == getOrigin_~person#1); 1056484#L505 assume !(3 == getOrigin_~person#1); 1056044#L509 assume !(4 == getOrigin_~person#1); 1056045#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1055540#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1055541#L932 assume !(0 == initPersonOnFloor_~floor#1); 1056166#L959 assume 1 == initPersonOnFloor_~floor#1; 1057476#L960 assume !(0 == initPersonOnFloor_~person#1); 1058556#L963 assume !(1 == initPersonOnFloor_~person#1); 1054889#L966 assume !(2 == initPersonOnFloor_~person#1); 1054890#L969 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1055475#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1058505#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1055896#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1058146#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1055533#L736-2 assume { :end_inline_callOnFloor } true; 1057789#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1056285#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1055887#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1055888#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1056754#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 1056755#L959-1 assume 1 == initPersonOnFloor_~floor#1; 1058432#L960-2 assume !(0 == initPersonOnFloor_~person#1); 1058433#L963-2 assume !(1 == initPersonOnFloor_~person#1); 1058736#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1055346#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1057704#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1057705#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1058345#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1055226#L736-5 assume { :end_inline_callOnFloor } true; 1057793#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1057171#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1057172#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1058672#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1058751#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1058752#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1057916#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1057917#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1058098#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1058627#L2972 assume !(0 != timeShift_~tmp___9~2#1); 1058629#L3063 assume !(1 == ~doorState~0); 1066573#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1067000#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1066999#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1066998#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1066567#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1058360#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1056550#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 1058309#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 1058311#L2760 assume !(1 == ~currentHeading~0); 1057486#L2770 assume !(0 == ~currentFloorID~0); 1056420#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1056216#L2776-1 assume { :end_inline_continueInDirection } true; 1055584#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1055585#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1055670#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1055671#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1057176#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1057177#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1055517#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1059031#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1059032#L198-2 assume !false; 1074277#L199 [2022-12-13 18:15:56,019 INFO L750 eck$LassoCheckResult]: Loop: 1074277#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1084881#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1084882#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1086653#L206 assume 1 != cleanup_~tmp___0~0#1; 1086651#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1086647#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1086645#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1084465#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1084456#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1084451#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1084449#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1084434#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1076114#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1084431#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1084428#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1084417#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1084412#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 1084399#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 1084395#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1084391#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1084389#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1084388#L2974-2 assume !(0 != ~persons_0~0); 1095214#L2974-3 assume !(0 != ~persons_1~0); 1095194#L2988-1 assume !(0 != ~persons_2~0); 1095191#L3002-1 assume !(0 != ~persons_3~0); 1094113#L3016-1 assume !(0 != ~persons_4~0); 1094080#L3030-1 assume !(0 != ~persons_5~0); 1094075#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1094071#L752-12 assume 0 == isPersonOnFloor_~floor#1; 1093999#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093967#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 1093965#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 1093963#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1093962#L752-14 assume 0 == isPersonOnFloor_~floor#1; 1093933#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093920#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 1093916#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1093915#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1093914#L752-16 assume 0 == isPersonOnFloor_~floor#1; 1093823#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093809#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 1093807#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1093805#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1093804#L752-18 assume 0 == isPersonOnFloor_~floor#1; 1093761#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093741#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 1093739#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1093737#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1093735#L752-20 assume 0 == isPersonOnFloor_~floor#1; 1093723#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093696#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 1093695#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1093693#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1093692#L752-22 assume 0 == isPersonOnFloor_~floor#1; 1093647#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1093645#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 1093642#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1093593#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1093591#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 1093586#L703-41 assume { :end_inline_resetCallOnFloor } true; 1093584#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1093460#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1093456#L2134-5 assume { :end_inline_resetFloorButton } true; 1093455#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1093454#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1093453#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1093452#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1084909#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1084910#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1084900#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1093444#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1084885#L198-2 assume !false; 1074277#L199 [2022-12-13 18:15:56,019 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:56,019 INFO L85 PathProgramCache]: Analyzing trace with hash -950039303, now seen corresponding path program 1 times [2022-12-13 18:15:56,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:56,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1638047780] [2022-12-13 18:15:56,020 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:56,020 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:56,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:56,067 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:56,067 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:56,067 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1638047780] [2022-12-13 18:15:56,067 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1638047780] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:56,067 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:56,067 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:15:56,067 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1485696953] [2022-12-13 18:15:56,067 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:56,068 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:15:56,068 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:15:56,068 INFO L85 PathProgramCache]: Analyzing trace with hash -46423005, now seen corresponding path program 6 times [2022-12-13 18:15:56,068 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:15:56,068 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1674471139] [2022-12-13 18:15:56,068 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:15:56,068 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:15:56,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:15:56,123 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:15:56,123 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:15:56,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1674471139] [2022-12-13 18:15:56,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1674471139] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:15:56,124 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:15:56,124 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-12-13 18:15:56,124 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466647287] [2022-12-13 18:15:56,124 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:15:56,124 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:15:56,124 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:15:56,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-12-13 18:15:56,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-12-13 18:15:56,125 INFO L87 Difference]: Start difference. First operand 41184 states and 75937 transitions. cyclomatic complexity: 34762 Second operand has 8 states, 8 states have (on average 9.0) internal successors, (72), 8 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:00,323 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:00,324 INFO L93 Difference]: Finished difference Result 438721 states and 806530 transitions. [2022-12-13 18:16:00,324 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 438721 states and 806530 transitions. [2022-12-13 18:16:01,855 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 191330 [2022-12-13 18:16:02,976 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 438721 states to 438721 states and 806530 transitions. [2022-12-13 18:16:02,976 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 286012 [2022-12-13 18:16:03,138 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 286012 [2022-12-13 18:16:03,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 438721 states and 806530 transitions. [2022-12-13 18:16:03,142 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:03,142 INFO L218 hiAutomatonCegarLoop]: Abstraction has 438721 states and 806530 transitions. [2022-12-13 18:16:03,346 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 438721 states and 806530 transitions. [2022-12-13 18:16:05,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 438721 to 81230. [2022-12-13 18:16:05,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81230 states, 81230 states have (on average 1.8428413147851779) internal successors, (149694), 81229 states have internal predecessors, (149694), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:05,244 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81230 states to 81230 states and 149694 transitions. [2022-12-13 18:16:05,244 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81230 states and 149694 transitions. [2022-12-13 18:16:05,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 32 states. [2022-12-13 18:16:05,245 INFO L428 stractBuchiCegarLoop]: Abstraction has 81230 states and 149694 transitions. [2022-12-13 18:16:05,245 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 18:16:05,245 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81230 states and 149694 transitions. [2022-12-13 18:16:05,465 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:05,466 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:05,466 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:05,467 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:05,467 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:05,467 INFO L748 eck$LassoCheckResult]: Stem: 1535499#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1535500#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1537556#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1536661#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 1536662#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1537022#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1538596#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1538597#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1536339#L493 assume !(0 == getOrigin_~person#1); 1536340#L497 assume !(1 == getOrigin_~person#1); 1536466#L501 assume !(2 == getOrigin_~person#1); 1536467#L505 assume !(3 == getOrigin_~person#1); 1536028#L509 assume !(4 == getOrigin_~person#1); 1536029#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1535525#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1535526#L932 assume !(0 == initPersonOnFloor_~floor#1); 1536147#L959 assume 1 == initPersonOnFloor_~floor#1; 1537434#L960 assume !(0 == initPersonOnFloor_~person#1); 1538507#L963 assume !(1 == initPersonOnFloor_~person#1); 1534878#L966 assume !(2 == initPersonOnFloor_~person#1); 1534879#L969 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 1535465#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1538459#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1535882#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1538097#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1537931#L736-2 assume { :end_inline_callOnFloor } true; 1537738#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1536267#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1535871#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1535872#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1536730#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 1536731#L959-1 assume 1 == initPersonOnFloor_~floor#1; 1538385#L960-2 assume !(0 == initPersonOnFloor_~person#1); 1538386#L963-2 assume !(1 == initPersonOnFloor_~person#1); 1538678#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1535337#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1537657#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1537658#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1538296#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1538297#L736-5 assume { :end_inline_callOnFloor } true; 1538999#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1537131#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1537132#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1535166#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1535167#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1537426#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1537427#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1539158#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1539159#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1539376#L2972 assume !(0 != timeShift_~tmp___9~2#1); 1540336#L3063 assume !(1 == ~doorState~0); 1544555#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1544554#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1544553#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1544552#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1544550#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1544548#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1544524#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 1544518#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 1544512#L2760 assume !(1 == ~currentHeading~0); 1544506#L2770 assume !(0 == ~currentFloorID~0); 1544499#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1543601#L2776-1 assume { :end_inline_continueInDirection } true; 1543602#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1543597#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1543598#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1543592#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1543593#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1543579#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1543578#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1543577#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1543575#L198-2 assume !false; 1543576#L199 [2022-12-13 18:16:05,468 INFO L750 eck$LassoCheckResult]: Loop: 1543576#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1593504#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1593486#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1593484#L206 assume 1 != cleanup_~tmp___0~0#1; 1593245#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1593244#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1593243#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1586924#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1586922#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1586920#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1586917#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1586916#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1578155#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1586914#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1586912#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1586910#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1586906#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1586900#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1586893#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 1586887#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 1586884#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1586882#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1586879#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1586880#L2974-2 assume !(0 != ~persons_0~0); 1594130#L2974-3 assume !(0 != ~persons_1~0); 1594074#L2988-1 assume !(0 != ~persons_2~0); 1594071#L3002-1 assume !(0 != ~persons_3~0); 1594050#L3016-1 assume !(0 != ~persons_4~0); 1594048#L3030-1 assume !(0 != ~persons_5~0); 1594044#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1594043#L752-12 assume 0 == isPersonOnFloor_~floor#1; 1594019#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593987#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 1593985#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 1593983#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1593982#L752-14 assume 0 == isPersonOnFloor_~floor#1; 1593955#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593942#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 1593938#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1593937#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1593936#L752-16 assume 0 == isPersonOnFloor_~floor#1; 1593906#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593887#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 1593884#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1593877#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1593876#L752-18 assume 0 == isPersonOnFloor_~floor#1; 1593800#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593773#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 1593770#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1593768#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1593767#L752-20 assume 0 == isPersonOnFloor_~floor#1; 1593626#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593599#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 1593597#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1593595#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1593593#L752-22 assume 0 == isPersonOnFloor_~floor#1; 1593561#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1593554#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 1593551#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1593549#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1593547#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 1593546#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1593542#L703-41 assume { :end_inline_resetCallOnFloor } true; 1593541#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1593539#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1593535#L2134-5 assume { :end_inline_resetFloorButton } true; 1593534#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1593533#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1593532#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1593531#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1593530#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1593527#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1593518#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1593508#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1593506#L198-2 assume !false; 1543576#L199 [2022-12-13 18:16:05,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:05,468 INFO L85 PathProgramCache]: Analyzing trace with hash -950039303, now seen corresponding path program 2 times [2022-12-13 18:16:05,469 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:05,469 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316170873] [2022-12-13 18:16:05,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:05,469 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:05,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:05,526 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:05,526 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:05,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316170873] [2022-12-13 18:16:05,526 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316170873] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:05,526 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:05,527 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:05,527 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1953817381] [2022-12-13 18:16:05,527 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:05,527 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:05,527 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:05,528 INFO L85 PathProgramCache]: Analyzing trace with hash -48084464, now seen corresponding path program 1 times [2022-12-13 18:16:05,528 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:05,528 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1721324630] [2022-12-13 18:16:05,528 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:05,528 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:05,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:05,589 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:05,589 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:05,589 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1721324630] [2022-12-13 18:16:05,589 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1721324630] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:05,589 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:05,590 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:05,590 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [30207395] [2022-12-13 18:16:05,590 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:05,590 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:05,590 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:05,591 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:16:05,591 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:16:05,591 INFO L87 Difference]: Start difference. First operand 81230 states and 149694 transitions. cyclomatic complexity: 68473 Second operand has 4 states, 4 states have (on average 18.0) internal successors, (72), 4 states have internal predecessors, (72), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:06,261 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:06,261 INFO L93 Difference]: Finished difference Result 162343 states and 299191 transitions. [2022-12-13 18:16:06,261 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 162343 states and 299191 transitions. [2022-12-13 18:16:06,827 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 83028 [2022-12-13 18:16:07,335 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 162343 states to 162343 states and 299191 transitions. [2022-12-13 18:16:07,336 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108623 [2022-12-13 18:16:07,397 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108623 [2022-12-13 18:16:07,397 INFO L73 IsDeterministic]: Start isDeterministic. Operand 162343 states and 299191 transitions. [2022-12-13 18:16:07,400 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:07,400 INFO L218 hiAutomatonCegarLoop]: Abstraction has 162343 states and 299191 transitions. [2022-12-13 18:16:07,468 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162343 states and 299191 transitions. [2022-12-13 18:16:08,239 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162343 to 81230. [2022-12-13 18:16:08,292 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81230 states, 81230 states have (on average 1.8427058968361443) internal successors, (149683), 81229 states have internal predecessors, (149683), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:08,412 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81230 states to 81230 states and 149683 transitions. [2022-12-13 18:16:08,413 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81230 states and 149683 transitions. [2022-12-13 18:16:08,413 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:16:08,414 INFO L428 stractBuchiCegarLoop]: Abstraction has 81230 states and 149683 transitions. [2022-12-13 18:16:08,414 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 18:16:08,414 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81230 states and 149683 transitions. [2022-12-13 18:16:08,585 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:08,585 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:08,585 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:08,586 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:08,586 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:08,586 INFO L748 eck$LassoCheckResult]: Stem: 1779082#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1779083#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1781151#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1780258#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 1780259#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1780627#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1782186#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1782187#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1779929#L493 assume !(0 == getOrigin_~person#1); 1779930#L497 assume !(1 == getOrigin_~person#1); 1780055#L501 assume !(2 == getOrigin_~person#1); 1780056#L505 assume !(3 == getOrigin_~person#1); 1779611#L509 assume !(4 == getOrigin_~person#1); 1779612#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1779109#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1779110#L932 assume !(0 == initPersonOnFloor_~floor#1); 1779734#L959 assume 1 == initPersonOnFloor_~floor#1; 1781031#L960 assume !(0 == initPersonOnFloor_~person#1); 1782094#L963 assume !(1 == initPersonOnFloor_~person#1); 1778462#L966 assume !(2 == initPersonOnFloor_~person#1); 1778463#L969 assume !(3 == initPersonOnFloor_~person#1); 1779049#L972 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 1782045#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1782046#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1779467#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1781692#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1781524#L736-2 assume { :end_inline_callOnFloor } true; 1781525#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1779855#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 1779856#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 1782768#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1782769#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 1782760#L959-1 assume 1 == initPersonOnFloor_~floor#1; 1782735#L960-2 assume !(0 == initPersonOnFloor_~person#1); 1782274#L963-2 assume !(1 == initPersonOnFloor_~person#1); 1782275#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 1782740#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 1782741#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1782013#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1782014#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1778796#L736-5 assume { :end_inline_callOnFloor } true; 1781342#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 1781343#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1782204#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1778750#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1778751#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1781023#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1781024#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1781463#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1779358#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1779359#L2972 assume !(0 != timeShift_~tmp___9~2#1); 1780283#L3063 assume !(1 == ~doorState~0); 1780285#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1799188#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1799187#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1799186#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 1799185#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1799020#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 1799016#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 1799013#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 1781871#L2760 assume !(1 == ~currentHeading~0); 1781872#L2770 assume !(0 == ~currentFloorID~0); 1782345#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1800162#L2776-1 assume { :end_inline_continueInDirection } true; 1779156#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1779157#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1782702#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1815147#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1780742#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1780743#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1779087#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1782548#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1782549#L198-2 assume !false; 1814016#L199 [2022-12-13 18:16:08,587 INFO L750 eck$LassoCheckResult]: Loop: 1814016#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1856327#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 1856323#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1856319#L206 assume 1 != cleanup_~tmp___0~0#1; 1856316#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1856312#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1856309#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1856305#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 1835118#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1856299#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1851572#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1851570#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1821821#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 1851567#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 1851562#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1851560#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 1851558#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1851554#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1851552#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 1851549#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 1851544#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 1851542#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1851540#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 1851537#L2974-2 assume !(0 != ~persons_0~0); 1852706#L2974-3 assume !(0 != ~persons_1~0); 1852650#L2988-1 assume !(0 != ~persons_2~0); 1852647#L3002-1 assume !(0 != ~persons_3~0); 1852626#L3016-1 assume !(0 != ~persons_4~0); 1852624#L3030-1 assume !(0 != ~persons_5~0); 1852620#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1852618#L752-12 assume 0 == isPersonOnFloor_~floor#1; 1852611#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1852579#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 1852577#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 1852575#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1852573#L752-14 assume 0 == isPersonOnFloor_~floor#1; 1850940#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1850927#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 1850923#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 1850922#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1850920#L752-16 assume 0 == isPersonOnFloor_~floor#1; 1850813#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1850800#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 1850798#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 1850799#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1852572#L752-18 assume 0 == isPersonOnFloor_~floor#1; 1852492#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1852468#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 1852465#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 1852463#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1852462#L752-20 assume 0 == isPersonOnFloor_~floor#1; 1852439#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1852412#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 1852410#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 1852408#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 1852407#L752-22 assume 0 == isPersonOnFloor_~floor#1; 1852369#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 1850784#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 1850443#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 1837722#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 1837665#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 1837666#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 1856435#L703-41 assume { :end_inline_resetCallOnFloor } true; 1856433#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 1856428#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 1856424#L2134-5 assume { :end_inline_resetFloorButton } true; 1856423#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1856422#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 1856421#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 1856420#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1856419#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 1856354#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1856342#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 1856338#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1856334#L198-2 assume !false; 1814016#L199 [2022-12-13 18:16:08,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:08,587 INFO L85 PathProgramCache]: Analyzing trace with hash 2026556244, now seen corresponding path program 1 times [2022-12-13 18:16:08,587 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:08,587 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1272223294] [2022-12-13 18:16:08,587 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:08,587 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:08,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:08,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:08,638 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:08,638 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1272223294] [2022-12-13 18:16:08,638 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1272223294] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:08,638 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:08,639 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:08,639 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [906838217] [2022-12-13 18:16:08,639 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:08,639 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:08,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:08,639 INFO L85 PathProgramCache]: Analyzing trace with hash -48084464, now seen corresponding path program 2 times [2022-12-13 18:16:08,640 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:08,640 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211592130] [2022-12-13 18:16:08,640 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:08,640 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:08,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:08,686 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:08,686 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:08,686 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211592130] [2022-12-13 18:16:08,686 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211592130] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:08,686 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:08,686 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:08,686 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049901837] [2022-12-13 18:16:08,686 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:08,687 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:08,687 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:08,687 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:16:08,687 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:16:08,687 INFO L87 Difference]: Start difference. First operand 81230 states and 149683 transitions. cyclomatic complexity: 68462 Second operand has 4 states, 4 states have (on average 18.25) internal successors, (73), 4 states have internal predecessors, (73), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:09,369 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:09,369 INFO L93 Difference]: Finished difference Result 162343 states and 299178 transitions. [2022-12-13 18:16:09,369 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 162343 states and 299178 transitions. [2022-12-13 18:16:10,084 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 83028 [2022-12-13 18:16:10,504 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 162343 states to 162343 states and 299178 transitions. [2022-12-13 18:16:10,504 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108623 [2022-12-13 18:16:10,578 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108623 [2022-12-13 18:16:10,578 INFO L73 IsDeterministic]: Start isDeterministic. Operand 162343 states and 299178 transitions. [2022-12-13 18:16:10,582 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:10,582 INFO L218 hiAutomatonCegarLoop]: Abstraction has 162343 states and 299178 transitions. [2022-12-13 18:16:10,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162343 states and 299178 transitions. [2022-12-13 18:16:11,557 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162343 to 81230. [2022-12-13 18:16:11,609 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81230 states, 81230 states have (on average 1.8425704788871107) internal successors, (149672), 81229 states have internal predecessors, (149672), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:11,728 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81230 states to 81230 states and 149672 transitions. [2022-12-13 18:16:11,728 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81230 states and 149672 transitions. [2022-12-13 18:16:11,729 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:16:11,729 INFO L428 stractBuchiCegarLoop]: Abstraction has 81230 states and 149672 transitions. [2022-12-13 18:16:11,730 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 18:16:11,730 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81230 states and 149672 transitions. [2022-12-13 18:16:11,923 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:11,924 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:11,924 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:11,925 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:11,925 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:11,926 INFO L748 eck$LassoCheckResult]: Stem: 2022668#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2022669#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2024739#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2023835#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 2023836#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2024206#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2025781#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2025782#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2023517#L493 assume !(0 == getOrigin_~person#1); 2023518#L497 assume !(1 == getOrigin_~person#1); 2023641#L501 assume !(2 == getOrigin_~person#1); 2023642#L505 assume !(3 == getOrigin_~person#1); 2023201#L509 assume !(4 == getOrigin_~person#1); 2023202#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2022694#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2022695#L932 assume !(0 == initPersonOnFloor_~floor#1); 2023322#L959 assume 1 == initPersonOnFloor_~floor#1; 2024618#L960 assume !(0 == initPersonOnFloor_~person#1); 2025687#L963 assume !(1 == initPersonOnFloor_~person#1); 2022046#L966 assume !(2 == initPersonOnFloor_~person#1); 2022047#L969 assume !(3 == initPersonOnFloor_~person#1); 2022636#L972 assume !(4 == initPersonOnFloor_~person#1); 2025701#L975 assume !(5 == initPersonOnFloor_~person#1); 2025638#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2025639#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2023055#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2025279#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2025280#L736-2 assume { :end_inline_callOnFloor } true; 2026385#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2026384#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2026380#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2026379#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2026376#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 2026375#L959-1 assume 1 == initPersonOnFloor_~floor#1; 2025567#L960-2 assume !(0 == initPersonOnFloor_~person#1); 2025568#L963-2 assume !(1 == initPersonOnFloor_~person#1); 2026368#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2026318#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2026319#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2025606#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2025607#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2022381#L736-5 assume { :end_inline_callOnFloor } true; 2024932#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2024933#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2025802#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2022335#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2022336#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2024609#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2024610#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2025059#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2022947#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2022948#L2972 assume !(0 != timeShift_~tmp___9~2#1); 2023860#L3063 assume !(1 == ~doorState~0); 2023862#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2046164#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2046163#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2046162#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 2046156#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2046084#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2046083#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 2046081#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 2046008#L2760 assume !(1 == ~currentHeading~0); 2046009#L2770 assume !(0 == ~currentFloorID~0); 2045994#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2045988#L2776-1 assume { :end_inline_continueInDirection } true; 2056563#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2056562#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2056561#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2056560#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2056559#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2056558#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2022673#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2026150#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2026151#L198-2 assume !false; 2059599#L199 [2022-12-13 18:16:11,926 INFO L750 eck$LassoCheckResult]: Loop: 2059599#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2084787#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2084786#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2084785#L206 assume 1 != cleanup_~tmp___0~0#1; 2084784#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2084779#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2084777#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 2084776#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 2082730#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 2084775#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2084774#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2084773#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2060409#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2084772#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2084771#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2084770#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2084768#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2084767#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2084766#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 2084764#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 2084762#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2084761#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2084706#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2084676#L2974-2 assume !(0 != ~persons_0~0); 2084671#L2974-3 assume !(0 != ~persons_1~0); 2084615#L2988-1 assume !(0 != ~persons_2~0); 2084612#L3002-1 assume !(0 != ~persons_3~0); 2084591#L3016-1 assume !(0 != ~persons_4~0); 2084589#L3030-1 assume !(0 != ~persons_5~0); 2084585#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084584#L752-12 assume 0 == isPersonOnFloor_~floor#1; 2084540#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2084508#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 2084506#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 2084504#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084503#L752-14 assume 0 == isPersonOnFloor_~floor#1; 2084451#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2084438#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 2084434#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2084433#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084431#L752-16 assume 0 == isPersonOnFloor_~floor#1; 2084398#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2084384#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 2084382#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2084380#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084379#L752-18 assume 0 == isPersonOnFloor_~floor#1; 2084343#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2084323#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 2084321#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2084319#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084318#L752-20 assume 0 == isPersonOnFloor_~floor#1; 2084308#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2084282#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 2084280#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2084278#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2084277#L752-22 assume 0 == isPersonOnFloor_~floor#1; 2084240#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2082823#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 2082821#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2082818#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2082761#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 2082762#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2084820#L703-41 assume { :end_inline_resetCallOnFloor } true; 2084819#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2084817#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2084813#L2134-5 assume { :end_inline_resetFloorButton } true; 2084812#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2084811#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2084810#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2084803#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2084802#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2084799#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2084790#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2084789#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2084788#L198-2 assume !false; 2059599#L199 [2022-12-13 18:16:11,927 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:11,927 INFO L85 PathProgramCache]: Analyzing trace with hash 900960498, now seen corresponding path program 1 times [2022-12-13 18:16:11,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:11,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [211097539] [2022-12-13 18:16:11,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:11,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:11,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:11,970 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:11,970 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:11,970 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [211097539] [2022-12-13 18:16:11,970 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [211097539] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:11,970 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:11,970 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:16:11,970 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000708048] [2022-12-13 18:16:11,970 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:11,970 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:11,971 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:11,971 INFO L85 PathProgramCache]: Analyzing trace with hash -48084464, now seen corresponding path program 3 times [2022-12-13 18:16:11,971 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:11,971 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1393145472] [2022-12-13 18:16:11,971 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:11,972 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:11,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:12,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:12,153 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:12,153 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1393145472] [2022-12-13 18:16:12,153 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1393145472] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:12,154 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:12,154 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:12,154 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1183056884] [2022-12-13 18:16:12,154 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:12,154 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:12,154 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:12,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:16:12,155 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:16:12,155 INFO L87 Difference]: Start difference. First operand 81230 states and 149672 transitions. cyclomatic complexity: 68451 Second operand has 3 states, 3 states have (on average 24.666666666666668) internal successors, (74), 3 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:12,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:12,591 INFO L93 Difference]: Finished difference Result 162325 states and 299155 transitions. [2022-12-13 18:16:12,591 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 162325 states and 299155 transitions. [2022-12-13 18:16:13,227 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 83028 [2022-12-13 18:16:13,566 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 162325 states to 162325 states and 299155 transitions. [2022-12-13 18:16:13,566 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108605 [2022-12-13 18:16:13,626 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108605 [2022-12-13 18:16:13,627 INFO L73 IsDeterministic]: Start isDeterministic. Operand 162325 states and 299155 transitions. [2022-12-13 18:16:13,629 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:13,630 INFO L218 hiAutomatonCegarLoop]: Abstraction has 162325 states and 299155 transitions. [2022-12-13 18:16:13,696 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 162325 states and 299155 transitions. [2022-12-13 18:16:14,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 162325 to 81230. [2022-12-13 18:16:14,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81230 states, 81230 states have (on average 1.8425581681644712) internal successors, (149671), 81229 states have internal predecessors, (149671), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:14,894 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81230 states to 81230 states and 149671 transitions. [2022-12-13 18:16:14,894 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81230 states and 149671 transitions. [2022-12-13 18:16:14,894 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 18:16:14,895 INFO L428 stractBuchiCegarLoop]: Abstraction has 81230 states and 149671 transitions. [2022-12-13 18:16:14,895 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 18:16:14,895 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81230 states and 149671 transitions. [2022-12-13 18:16:15,243 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:15,244 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:15,244 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:15,245 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:15,245 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:15,245 INFO L748 eck$LassoCheckResult]: Stem: 2266230#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2266231#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2268313#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2267400#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 2267401#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2267778#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2269373#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2269374#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2267075#L493 assume !(0 == getOrigin_~person#1); 2267076#L497 assume !(1 == getOrigin_~person#1); 2267201#L501 assume !(2 == getOrigin_~person#1); 2267202#L505 assume !(3 == getOrigin_~person#1); 2266761#L509 assume !(4 == getOrigin_~person#1); 2266762#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2266256#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2266257#L932 assume !(0 == initPersonOnFloor_~floor#1); 2266884#L959 assume 1 == initPersonOnFloor_~floor#1; 2268190#L960 assume !(0 == initPersonOnFloor_~person#1); 2269286#L963 assume !(1 == initPersonOnFloor_~person#1); 2265609#L966 assume !(2 == initPersonOnFloor_~person#1); 2265610#L969 assume !(3 == initPersonOnFloor_~person#1); 2266196#L972 assume !(4 == initPersonOnFloor_~person#1); 2269299#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2269233#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2269234#L1654 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2266614#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2268871#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2268872#L736-2 assume { :end_inline_callOnFloor } true; 2270020#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2270019#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2270018#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2269978#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2269979#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 2270007#L959-1 assume 1 == initPersonOnFloor_~floor#1; 2269940#L960-2 assume !(0 == initPersonOnFloor_~person#1); 2269459#L963-2 assume !(1 == initPersonOnFloor_~person#1); 2269460#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2269949#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2269950#L1654-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 2269203#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2269204#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2265942#L736-5 assume { :end_inline_callOnFloor } true; 2268514#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2268515#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2269390#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2265896#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2265897#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2268181#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2268182#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2285699#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2266505#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2266506#L2972 assume !(0 != timeShift_~tmp___9~2#1); 2267425#L3063 assume !(1 == ~doorState~0); 2267427#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2288660#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2288659#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2287463#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 2287462#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2287394#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2287373#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 2287369#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 2287370#L2760 assume !(1 == ~currentHeading~0); 2287775#L2770 assume !(0 == ~currentFloorID~0); 2287771#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2287766#L2776-1 assume { :end_inline_continueInDirection } true; 2302382#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2302381#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2302380#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2302379#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2267894#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2267895#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2302027#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2302028#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2301908#L198-2 assume !false; 2301909#L199 [2022-12-13 18:16:15,246 INFO L750 eck$LassoCheckResult]: Loop: 2301909#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2324221#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2324220#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2324218#L206 assume 1 != cleanup_~tmp___0~0#1; 2324208#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2324207#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2324206#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 2323911#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 2323910#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 2323909#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2323904#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2323901#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2305843#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2323900#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2323899#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2323898#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2323896#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2323890#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2323887#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 2323885#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 2323882#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2323881#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2323879#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2323880#L2974-2 assume !(0 != ~persons_0~0); 2325840#L2974-3 assume !(0 != ~persons_1~0); 2325784#L2988-1 assume !(0 != ~persons_2~0); 2325781#L3002-1 assume !(0 != ~persons_3~0); 2325759#L3016-1 assume !(0 != ~persons_4~0); 2325757#L3030-1 assume !(0 != ~persons_5~0); 2325752#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325750#L752-12 assume 0 == isPersonOnFloor_~floor#1; 2325486#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325454#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 2325452#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 2325450#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325449#L752-14 assume 0 == isPersonOnFloor_~floor#1; 2325420#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325407#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 2325403#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2325402#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325401#L752-16 assume 0 == isPersonOnFloor_~floor#1; 2325370#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325356#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 2325354#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2325352#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325351#L752-18 assume 0 == isPersonOnFloor_~floor#1; 2325332#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325308#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 2325305#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2325303#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325302#L752-20 assume 0 == isPersonOnFloor_~floor#1; 2325279#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325252#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 2325250#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2325248#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2325247#L752-22 assume 0 == isPersonOnFloor_~floor#1; 2325119#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2325117#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 2325115#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2325113#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2325111#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 2325110#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2325106#L703-41 assume { :end_inline_resetCallOnFloor } true; 2325105#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2325103#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2325099#L2134-5 assume { :end_inline_resetFloorButton } true; 2325098#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2325097#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2325096#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2325095#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2324336#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2324281#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2324271#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2324269#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2324229#L198-2 assume !false; 2301909#L199 [2022-12-13 18:16:15,246 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:15,246 INFO L85 PathProgramCache]: Analyzing trace with hash -637379532, now seen corresponding path program 1 times [2022-12-13 18:16:15,246 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:15,246 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1747272788] [2022-12-13 18:16:15,246 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:15,246 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:15,257 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:15,328 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:15,328 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:15,328 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1747272788] [2022-12-13 18:16:15,328 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1747272788] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:15,328 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:15,329 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:16:15,329 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1714746693] [2022-12-13 18:16:15,329 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:15,329 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:15,329 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:15,329 INFO L85 PathProgramCache]: Analyzing trace with hash -48084464, now seen corresponding path program 4 times [2022-12-13 18:16:15,329 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:15,329 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1146938697] [2022-12-13 18:16:15,330 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:15,330 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:15,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:15,371 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:15,371 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:15,371 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1146938697] [2022-12-13 18:16:15,371 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1146938697] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:15,371 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:15,372 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:15,372 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1415651265] [2022-12-13 18:16:15,372 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:15,372 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:15,372 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:15,373 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 18:16:15,373 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:16:15,373 INFO L87 Difference]: Start difference. First operand 81230 states and 149671 transitions. cyclomatic complexity: 68450 Second operand has 7 states, 7 states have (on average 10.571428571428571) internal successors, (74), 7 states have internal predecessors, (74), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:16,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:16,536 INFO L93 Difference]: Finished difference Result 324559 states and 598176 transitions. [2022-12-13 18:16:16,536 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 324559 states and 598176 transitions. [2022-12-13 18:16:17,724 INFO L131 ngComponentsAnalysis]: Automaton has 28 accepting balls. 166056 [2022-12-13 18:16:18,626 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 324559 states to 324559 states and 598176 transitions. [2022-12-13 18:16:18,626 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 217119 [2022-12-13 18:16:18,752 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 217119 [2022-12-13 18:16:18,752 INFO L73 IsDeterministic]: Start isDeterministic. Operand 324559 states and 598176 transitions. [2022-12-13 18:16:18,752 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:18,753 INFO L218 hiAutomatonCegarLoop]: Abstraction has 324559 states and 598176 transitions. [2022-12-13 18:16:18,901 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 324559 states and 598176 transitions. [2022-12-13 18:16:20,259 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 324559 to 81234. [2022-12-13 18:16:20,313 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81234 states, 81234 states have (on average 1.842504370091341) internal successors, (149674), 81233 states have internal predecessors, (149674), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:20,435 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81234 states to 81234 states and 149674 transitions. [2022-12-13 18:16:20,435 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81234 states and 149674 transitions. [2022-12-13 18:16:20,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 18:16:20,436 INFO L428 stractBuchiCegarLoop]: Abstraction has 81234 states and 149674 transitions. [2022-12-13 18:16:20,436 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 18:16:20,436 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81234 states and 149674 transitions. [2022-12-13 18:16:20,609 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:20,609 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:20,609 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:20,610 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:20,610 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:20,611 INFO L748 eck$LassoCheckResult]: Stem: 2672047#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2672048#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2674128#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2673217#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 2673218#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2673588#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2675178#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2675179#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2672891#L493 assume !(0 == getOrigin_~person#1); 2672892#L497 assume !(1 == getOrigin_~person#1); 2673018#L501 assume !(2 == getOrigin_~person#1); 2673019#L505 assume !(3 == getOrigin_~person#1); 2672579#L509 assume !(4 == getOrigin_~person#1); 2672580#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2672077#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2672078#L932 assume !(0 == initPersonOnFloor_~floor#1); 2672699#L959 assume 1 == initPersonOnFloor_~floor#1; 2674005#L960 assume !(0 == initPersonOnFloor_~person#1); 2675087#L963 assume !(1 == initPersonOnFloor_~person#1); 2671423#L966 assume !(2 == initPersonOnFloor_~person#1); 2671424#L969 assume !(3 == initPersonOnFloor_~person#1); 2672012#L972 assume !(4 == initPersonOnFloor_~person#1); 2675101#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2675027#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2675028#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2675223#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2672431#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2674669#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2674506#L736-2 assume { :end_inline_callOnFloor } true; 2674507#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2672817#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2672818#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2675408#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2673287#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 2673288#L959-1 assume 1 == initPersonOnFloor_~floor#1; 2675745#L960-2 assume !(0 == initPersonOnFloor_~person#1); 2675263#L963-2 assume !(1 == initPersonOnFloor_~person#1); 2675264#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2671884#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2674231#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2674232#L1657-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2675379#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2674865#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2674866#L736-5 assume { :end_inline_callOnFloor } true; 2675598#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2673702#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2673703#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2671713#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2671714#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2674002#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2674003#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2674445#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2674623#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2675158#L2972 assume !(0 != timeShift_~tmp___9~2#1); 2675160#L3063 assume !(1 == ~doorState~0); 2677539#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2693776#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2693775#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2693769#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 2693766#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2693722#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2693721#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 2693714#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 2693715#L2760 assume !(1 == ~currentHeading~0); 2674015#L2770 assume !(0 == ~currentFloorID~0); 2672955#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2672750#L2776-1 assume { :end_inline_continueInDirection } true; 2672587#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2708137#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2708136#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2708135#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2708134#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2708103#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2708090#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2675554#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2675555#L198-2 assume !false; 2708143#L199 [2022-12-13 18:16:20,611 INFO L750 eck$LassoCheckResult]: Loop: 2708143#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2748746#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 2748745#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2748744#L206 assume 1 != cleanup_~tmp___0~0#1; 2748743#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2748742#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2748741#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 2748740#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 2728692#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 2748739#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2748738#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2748737#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2711281#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2748734#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2748732#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2748729#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2748726#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2748724#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2748722#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 2748718#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 2748715#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2748713#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2748711#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 2734803#L2974-2 assume !(0 != ~persons_0~0); 2734798#L2974-3 assume !(0 != ~persons_1~0); 2734742#L2988-1 assume !(0 != ~persons_2~0); 2734739#L3002-1 assume !(0 != ~persons_3~0); 2734718#L3016-1 assume !(0 != ~persons_4~0); 2734716#L3030-1 assume !(0 != ~persons_5~0); 2734712#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2734710#L752-12 assume 0 == isPersonOnFloor_~floor#1; 2734703#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2734671#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 2734669#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 2734667#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2734666#L752-14 assume 0 == isPersonOnFloor_~floor#1; 2734637#L753-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2734630#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 2734628#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 2734629#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2740840#L752-16 assume 0 == isPersonOnFloor_~floor#1; 2740817#L753-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2733969#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 2733967#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 2733968#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2735587#L752-18 assume 0 == isPersonOnFloor_~floor#1; 2735570#L753-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2735551#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 2735550#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 2733691#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2733690#L752-20 assume 0 == isPersonOnFloor_~floor#1; 2733667#L753-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2733640#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 2733638#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 2733636#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 2733635#L752-22 assume 0 == isPersonOnFloor_~floor#1; 2733569#L753-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 2733567#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 2733565#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 2733563#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 2733423#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 2733424#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 2746234#L703-41 assume { :end_inline_resetCallOnFloor } true; 2746233#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 2746231#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 2746227#L2134-5 assume { :end_inline_resetFloorButton } true; 2745427#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2745421#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 2745418#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2745417#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 2745416#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 2745394#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 2745388#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2748748#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2748747#L198-2 assume !false; 2708143#L199 [2022-12-13 18:16:20,611 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:20,611 INFO L85 PathProgramCache]: Analyzing trace with hash 33506320, now seen corresponding path program 1 times [2022-12-13 18:16:20,611 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:20,612 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [934869751] [2022-12-13 18:16:20,612 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:20,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:20,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:20,682 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:20,682 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:20,683 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [934869751] [2022-12-13 18:16:20,683 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [934869751] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:20,683 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:20,683 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:16:20,683 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1809485513] [2022-12-13 18:16:20,683 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:20,683 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:20,683 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:20,684 INFO L85 PathProgramCache]: Analyzing trace with hash -48084464, now seen corresponding path program 5 times [2022-12-13 18:16:20,684 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:20,684 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [372878244] [2022-12-13 18:16:20,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:20,684 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:20,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:20,724 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:20,724 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:20,725 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [372878244] [2022-12-13 18:16:20,725 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [372878244] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:20,725 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:20,725 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:16:20,725 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1865921334] [2022-12-13 18:16:20,725 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:20,725 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:20,726 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:20,726 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 18:16:20,726 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 18:16:20,726 INFO L87 Difference]: Start difference. First operand 81234 states and 149674 transitions. cyclomatic complexity: 68449 Second operand has 4 states, 4 states have (on average 18.75) internal successors, (75), 4 states have internal predecessors, (75), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:22,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:22,373 INFO L93 Difference]: Finished difference Result 233474 states and 425242 transitions. [2022-12-13 18:16:22,373 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 233474 states and 425242 transitions. [2022-12-13 18:16:23,234 INFO L131 ngComponentsAnalysis]: Automaton has 23 accepting balls. 97878 [2022-12-13 18:16:23,925 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 233474 states to 233474 states and 425242 transitions. [2022-12-13 18:16:23,926 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 150014 [2022-12-13 18:16:24,004 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 150014 [2022-12-13 18:16:24,004 INFO L73 IsDeterministic]: Start isDeterministic. Operand 233474 states and 425242 transitions. [2022-12-13 18:16:24,006 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:24,007 INFO L218 hiAutomatonCegarLoop]: Abstraction has 233474 states and 425242 transitions. [2022-12-13 18:16:24,112 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 233474 states and 425242 transitions. [2022-12-13 18:16:25,349 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 233474 to 81234. [2022-12-13 18:16:25,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81234 states, 81234 states have (on average 1.825885712878844) internal successors, (148324), 81233 states have internal predecessors, (148324), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:25,523 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81234 states to 81234 states and 148324 transitions. [2022-12-13 18:16:25,523 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81234 states and 148324 transitions. [2022-12-13 18:16:25,524 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:16:25,524 INFO L428 stractBuchiCegarLoop]: Abstraction has 81234 states and 148324 transitions. [2022-12-13 18:16:25,525 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 18:16:25,525 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81234 states and 148324 transitions. [2022-12-13 18:16:25,698 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:25,698 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:25,698 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:25,699 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:25,699 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:25,700 INFO L748 eck$LassoCheckResult]: Stem: 2986773#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2986774#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2988910#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2987965#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 2987966#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2988354#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2990059#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 2990060#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2987629#L493 assume !(0 == getOrigin_~person#1); 2987630#L497 assume !(1 == getOrigin_~person#1); 2987760#L501 assume !(2 == getOrigin_~person#1); 2987761#L505 assume !(3 == getOrigin_~person#1); 2987311#L509 assume !(4 == getOrigin_~person#1); 2987312#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2986800#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2986801#L932 assume !(0 == initPersonOnFloor_~floor#1); 2987434#L959 assume 1 == initPersonOnFloor_~floor#1; 2988785#L960 assume !(0 == initPersonOnFloor_~person#1); 2989956#L963 assume !(1 == initPersonOnFloor_~person#1); 2986146#L966 assume !(2 == initPersonOnFloor_~person#1); 2986147#L969 assume !(3 == initPersonOnFloor_~person#1); 2986741#L972 assume !(4 == initPersonOnFloor_~person#1); 2989970#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2989902#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2989903#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2990112#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2987163#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2989511#L724 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2989323#L736-2 assume { :end_inline_callOnFloor } true; 2989114#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2987557#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 2987152#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 2987153#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2987458#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 2988039#L959-1 assume 1 == initPersonOnFloor_~floor#1; 2989825#L960-2 assume !(0 == initPersonOnFloor_~person#1); 2989826#L963-2 assume !(1 == initPersonOnFloor_~person#1); 2990774#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 2986607#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2990879#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 2990373#L1657-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 2990316#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 2989732#L724-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2989733#L736-5 assume { :end_inline_callOnFloor } true; 2990599#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 2988470#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2988471#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2990868#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2990869#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 2990863#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2990861#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 2990855#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 2990857#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 2990038#L2972 assume !(0 != timeShift_~tmp___9~2#1); 2990040#L3063 assume !(1 == ~doorState~0); 2990770#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2990771#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 2987482#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 2987483#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 2986517#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 2986518#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 2990193#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 2990194#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 2991508#L2760 assume !(1 == ~currentHeading~0); 2991509#L2770 assume !(0 == ~currentFloorID~0); 2991498#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2991496#L2776-1 assume { :end_inline_continueInDirection } true; 3011926#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3011925#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 3011924#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3011923#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3011922#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 3011910#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 3011911#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3006235#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 3006236#L198-2 assume !false; 3015715#L199 [2022-12-13 18:16:25,700 INFO L750 eck$LassoCheckResult]: Loop: 3015715#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3062269#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 3062267#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3062266#L206 assume 1 != cleanup_~tmp___0~0#1; 3062265#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3062264#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3062263#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 3062262#L2259 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 3044535#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 3062261#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3062260#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3062259#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3027492#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3062248#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 3062246#L2820-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3062245#getCurrentFloorID_returnLabel#5 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 3062243#L2824-1 assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3062238#L656-31 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3062232#isFloorCalling_returnLabel#32 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 3062229#L2793-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 3062223#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#3 stopRequestedAtCurrentFloor_#t~ret82#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret82#1;havoc stopRequestedAtCurrentFloor_#t~ret82#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3062217#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 3062215#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 3053671#L2974-2 assume !(0 != ~persons_0~0); 3053667#L2974-3 assume !(0 != ~persons_1~0); 3053555#L2988-1 assume !(0 != ~persons_2~0); 3053552#L3002-1 assume !(0 != ~persons_3~0); 3053463#L3016-1 assume !(0 != ~persons_4~0); 3053395#L3030-1 assume !(0 != ~persons_5~0); 3053383#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3053381#L752-12 assume 0 == isPersonOnFloor_~floor#1; 3053380#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3053343#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 3053336#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 3051799#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3051797#L752-14 assume 0 == isPersonOnFloor_~floor#1; 3051798#L753-7 assume !(0 == isPersonOnFloor_~person#1); 3051769#L757-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3051756#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 3051752#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 3051751#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3051750#L752-16 assume 0 == isPersonOnFloor_~floor#1; 3051747#L753-8 assume !(0 == isPersonOnFloor_~person#1); 3051683#L757-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3051665#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 3051662#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 3051655#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3051652#L752-18 assume 0 == isPersonOnFloor_~floor#1; 3051653#L753-9 assume !(0 == isPersonOnFloor_~person#1); 3051626#L757-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3051602#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 3051593#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 3051590#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3051463#L752-20 assume 0 == isPersonOnFloor_~floor#1; 3051464#L753-10 assume !(0 == isPersonOnFloor_~person#1); 3051436#L757-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3051411#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 3051407#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 3051403#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3051400#L752-22 assume 0 == isPersonOnFloor_~floor#1; 3051399#L753-11 assume !(0 == isPersonOnFloor_~person#1); 3051342#L757-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3051331#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 3051325#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 3051322#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 3051307#L691-26 assume !(0 == resetCallOnFloor_~floorID#1); 3051308#L694-26 assume 1 == resetCallOnFloor_~floorID#1;~calls_1~0 := 0; 3062393#L703-41 assume { :end_inline_resetCallOnFloor } true; 3062392#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 3062390#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 3062386#L2134-5 assume { :end_inline_resetFloorButton } true; 3062385#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3062384#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 3062383#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3062381#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3062382#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 3062328#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 3062318#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3062312#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3062310#L198-2 assume !false; 3015715#L199 [2022-12-13 18:16:25,700 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:25,700 INFO L85 PathProgramCache]: Analyzing trace with hash 33506320, now seen corresponding path program 2 times [2022-12-13 18:16:25,701 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:25,701 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2002356132] [2022-12-13 18:16:25,701 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:25,701 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:25,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:25,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:25,769 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:25,770 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2002356132] [2022-12-13 18:16:25,770 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2002356132] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:25,770 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:25,770 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 18:16:25,770 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475454275] [2022-12-13 18:16:25,770 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:25,770 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:16:25,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:16:25,771 INFO L85 PathProgramCache]: Analyzing trace with hash 1731602677, now seen corresponding path program 1 times [2022-12-13 18:16:25,771 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:16:25,771 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1793099009] [2022-12-13 18:16:25,771 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:16:25,771 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:16:25,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:16:25,791 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:16:25,792 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:16:25,792 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1793099009] [2022-12-13 18:16:25,792 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1793099009] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:16:25,792 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:16:25,792 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:16:25,792 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2138787452] [2022-12-13 18:16:25,792 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:16:25,792 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:16:25,792 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:16:25,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 18:16:25,793 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 18:16:25,793 INFO L87 Difference]: Start difference. First operand 81234 states and 148324 transitions. cyclomatic complexity: 67099 Second operand has 7 states, 7 states have (on average 10.857142857142858) internal successors, (76), 7 states have internal predecessors, (76), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:26,939 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:16:26,939 INFO L93 Difference]: Finished difference Result 307911 states and 562454 transitions. [2022-12-13 18:16:26,939 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 307911 states and 562454 transitions. [2022-12-13 18:16:28,040 INFO L131 ngComponentsAnalysis]: Automaton has 28 accepting balls. 166056 [2022-12-13 18:16:28,968 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 307911 states to 307911 states and 562454 transitions. [2022-12-13 18:16:28,968 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 200471 [2022-12-13 18:16:29,102 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 200471 [2022-12-13 18:16:29,102 INFO L73 IsDeterministic]: Start isDeterministic. Operand 307911 states and 562454 transitions. [2022-12-13 18:16:29,102 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:16:29,102 INFO L218 hiAutomatonCegarLoop]: Abstraction has 307911 states and 562454 transitions. [2022-12-13 18:16:29,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 307911 states and 562454 transitions. [2022-12-13 18:16:30,419 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 307911 to 81176. [2022-12-13 18:16:30,473 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 81176 states, 81176 states have (on average 1.826130876121021) internal successors, (148238), 81175 states have internal predecessors, (148238), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:16:30,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81176 states to 81176 states and 148238 transitions. [2022-12-13 18:16:30,592 INFO L240 hiAutomatonCegarLoop]: Abstraction has 81176 states and 148238 transitions. [2022-12-13 18:16:30,593 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 18:16:30,593 INFO L428 stractBuchiCegarLoop]: Abstraction has 81176 states and 148238 transitions. [2022-12-13 18:16:30,593 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 18:16:30,593 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81176 states and 148238 transitions. [2022-12-13 18:16:30,765 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 41514 [2022-12-13 18:16:30,765 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:16:30,765 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:16:30,767 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:30,767 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:16:30,767 INFO L748 eck$LassoCheckResult]: Stem: 3375936#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3375937#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 3378006#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3377103#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 3377104#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 3377472#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 3379048#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 3379049#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 3376775#L493 assume !(0 == getOrigin_~person#1); 3376776#L497 assume !(1 == getOrigin_~person#1); 3376902#L501 assume !(2 == getOrigin_~person#1); 3376903#L505 assume !(3 == getOrigin_~person#1); 3376464#L509 assume !(4 == getOrigin_~person#1); 3376465#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 3375966#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3375967#L932 assume !(0 == initPersonOnFloor_~floor#1); 3376584#L959 assume 1 == initPersonOnFloor_~floor#1; 3377884#L960 assume !(0 == initPersonOnFloor_~person#1); 3378959#L963 assume !(1 == initPersonOnFloor_~person#1); 3375315#L966 assume !(2 == initPersonOnFloor_~person#1); 3375316#L969 assume !(3 == initPersonOnFloor_~person#1); 3375903#L972 assume !(4 == initPersonOnFloor_~person#1); 3378972#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 3378909#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 3378910#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 3379091#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 3376318#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 3378542#L724 assume !(0 == callOnFloor_~floorID#1); 3376777#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 3375959#L736-2 assume { :end_inline_callOnFloor } true; 3378190#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 3376703#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 3376309#L493-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 3376310#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 3376612#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 3379601#L959-1 assume 1 == initPersonOnFloor_~floor#1; 3378836#L960-2 assume !(0 == initPersonOnFloor_~person#1); 3378837#L963-2 assume !(1 == initPersonOnFloor_~person#1); 3379130#L966-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 3375773#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 3378107#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 3378108#L1657-2 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 3378877#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 3378748#L724-2 assume !(0 == callOnFloor_~floorID#1); 3375649#L727-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 3375650#L736-5 assume { :end_inline_callOnFloor } true; 3378194#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 3377581#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3377582#L656 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3379069#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3379618#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 3379616#L2820 assume 0 != stopRequestedAtCurrentFloor_~tmp~24#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3378318#getCurrentFloorID_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret81#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~9#1 := stopRequestedAtCurrentFloor_#t~ret81#1;havoc stopRequestedAtCurrentFloor_#t~ret81#1; 3378319#L2824 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~9#1);stopRequestedAtCurrentFloor_~retValue_acc~25#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3376211#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 3376212#L2972 assume !(0 != timeShift_~tmp___9~2#1); 3377132#L3063 assume !(1 == ~doorState~0); 3377134#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3380284#L656-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3380283#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3379899#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 3379900#L2703 assume 0 != stopRequestedInDirection_~tmp___0~7#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3379861#getCurrentFloorID_returnLabel#2 stopRequestedInDirection_#t~ret75#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~21#1 := stopRequestedInDirection_#t~ret75#1;havoc stopRequestedInDirection_#t~ret75#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~21#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~22#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 3379862#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 3379851#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 3379853#L2760 assume !(1 == ~currentHeading~0); 3377894#L2770 assume !(0 == ~currentFloorID~0); 3377895#L2770-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3376634#L2776-1 assume { :end_inline_continueInDirection } true; 3376472#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3407473#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 3407472#L1692 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3407469#L1693 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3407464#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 3407453#L1697 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 3407452#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3407451#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 3407448#L198-2 assume !false; 3407449#L199 [2022-12-13 18:16:30,768 INFO L750 eck$LassoCheckResult]: Loop: 3407449#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 3433112#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 3433111#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 3433110#L206 assume 1 != cleanup_~tmp___0~0#1; 3433109#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3433108#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3431572#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 3431573#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 3432539#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 3432533#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 3432532#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 3432531#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3432530#L656-30 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3417744#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 3432529#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 3432527#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 3432525#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 3432521#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 3432513#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 3432512#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 3432510#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 3432508#L2972-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 3432509#L2974-2 assume !(0 != ~persons_0~0); 3451520#L2974-3 assume !(0 != ~persons_1~0); 3451464#L2988-1 assume !(0 != ~persons_2~0); 3451461#L3002-1 assume !(0 != ~persons_3~0); 3451440#L3016-1 assume !(0 != ~persons_4~0); 3451438#L3030-1 assume !(0 != ~persons_5~0); 3451366#L3044-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret84#1, processWaitingOnFloor_#t~ret85#1, processWaitingOnFloor_#t~ret86#1, processWaitingOnFloor_#t~ret87#1, processWaitingOnFloor_#t~ret88#1, processWaitingOnFloor_#t~ret89#1, processWaitingOnFloor_#t~ret90#1, processWaitingOnFloor_#t~ret91#1, processWaitingOnFloor_#t~ret92#1, processWaitingOnFloor_#t~ret93#1, processWaitingOnFloor_#t~ret94#1, processWaitingOnFloor_#t~ret95#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~25#1, processWaitingOnFloor_~tmp___0~10#1, processWaitingOnFloor_~tmp___1~6#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~25#1;havoc processWaitingOnFloor_~tmp___0~10#1;havoc processWaitingOnFloor_~tmp___1~6#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3451147#L752-12 assume 0 == isPersonOnFloor_~floor#1; 3451140#L753-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3451108#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret84#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~10#1 := processWaitingOnFloor_#t~ret84#1;havoc processWaitingOnFloor_#t~ret84#1; 3451106#L2874-3 assume !(0 != processWaitingOnFloor_~tmp___0~10#1); 3451104#L2874-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3451102#L752-14 assume 0 == isPersonOnFloor_~floor#1; 3451103#L753-7 assume !(0 == isPersonOnFloor_~person#1); 3451074#L757-7 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3451061#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret86#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret86#1;havoc processWaitingOnFloor_#t~ret86#1; 3451057#L2887-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 3451056#L2887-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3451054#L752-16 assume 0 == isPersonOnFloor_~floor#1; 3451055#L753-8 assume !(0 == isPersonOnFloor_~person#1); 3450964#L757-8 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3450951#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret88#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret88#1;havoc processWaitingOnFloor_#t~ret88#1; 3450949#L2900-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 3450947#L2900-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3450945#L752-18 assume 0 == isPersonOnFloor_~floor#1; 3450946#L753-9 assume !(0 == isPersonOnFloor_~person#1); 3450860#L757-9 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3450842#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret90#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret90#1;havoc processWaitingOnFloor_#t~ret90#1; 3450840#L2913-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 3450838#L2913-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3450837#L752-20 assume 0 == isPersonOnFloor_~floor#1; 3450834#L753-10 assume !(0 == isPersonOnFloor_~person#1); 3450828#L757-10 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3450803#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret92#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret92#1;havoc processWaitingOnFloor_#t~ret92#1; 3450801#L2926-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 3450730#L2926-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~8#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~8#1; 3450729#L752-22 assume 0 == isPersonOnFloor_~floor#1; 3450724#L753-11 assume !(0 == isPersonOnFloor_~person#1); 3434943#L757-11 assume 1 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~8#1 := ~personOnFloor_1_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~8#1; 3434939#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret94#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret94#1;havoc processWaitingOnFloor_#t~ret94#1; 3434937#L2939-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 3434909#L2939-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 3434907#L691-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 3433128#L703-41 assume { :end_inline_resetCallOnFloor } true; 3433127#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 3433125#L2122-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 3433121#L2134-5 assume { :end_inline_resetFloorButton } true; 3433120#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 3433119#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 3433118#L1692-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 3433117#L1693-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 3431617#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret43#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret43#1;havoc __utac_acc__Specification1_spec__3_#t~ret43#1; 3433116#L1697-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 3431593#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 3433114#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 3433113#L198-2 assume !false; 3407449#L199 WARNING: YOUR LOGFILE WAS TOO LONG, SOME LINES IN THE MIDDLE WERE REMOVED. [2022-12-13 18:17:17,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:17,109 INFO L85 PathProgramCache]: Analyzing trace with hash 1242742869, now seen corresponding path program 1 times [2022-12-13 18:17:17,110 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:17,110 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192854353] [2022-12-13 18:17:17,110 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:17,110 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:17,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:17,164 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:17,164 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:17,164 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1192854353] [2022-12-13 18:17:17,164 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1192854353] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:17,164 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:17,164 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:17,164 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296621989] [2022-12-13 18:17:17,164 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:17,165 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:17,165 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:17,165 INFO L85 PathProgramCache]: Analyzing trace with hash -1260499208, now seen corresponding path program 1 times [2022-12-13 18:17:17,165 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:17,165 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1927344903] [2022-12-13 18:17:17,165 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:17,165 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:17,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:17,237 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 18:17:17,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:17,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1927344903] [2022-12-13 18:17:17,238 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1927344903] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:17,238 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:17,238 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:17,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2111904855] [2022-12-13 18:17:17,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:17,238 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:17,238 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:17,238 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:17:17,239 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:17:17,239 INFO L87 Difference]: Start difference. First operand 18898 states and 32313 transitions. cyclomatic complexity: 13420 Second operand has 6 states, 6 states have (on average 16.166666666666668) internal successors, (97), 5 states have internal predecessors, (97), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:17,562 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:17,563 INFO L93 Difference]: Finished difference Result 29833 states and 51272 transitions. [2022-12-13 18:17:17,563 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29833 states and 51272 transitions. [2022-12-13 18:17:17,645 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 17007 [2022-12-13 18:17:17,707 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29833 states to 29833 states and 51272 transitions. [2022-12-13 18:17:17,707 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18925 [2022-12-13 18:17:17,718 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18925 [2022-12-13 18:17:17,718 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29833 states and 51272 transitions. [2022-12-13 18:17:17,718 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:17,718 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29833 states and 51272 transitions. [2022-12-13 18:17:17,731 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29833 states and 51272 transitions. [2022-12-13 18:17:17,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29833 to 18864. [2022-12-13 18:17:17,864 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18864 states, 18864 states have (on average 1.7093405428329091) internal successors, (32245), 18863 states have internal predecessors, (32245), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:17,890 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18864 states to 18864 states and 32245 transitions. [2022-12-13 18:17:17,890 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18864 states and 32245 transitions. [2022-12-13 18:17:17,891 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-12-13 18:17:17,891 INFO L428 stractBuchiCegarLoop]: Abstraction has 18864 states and 32245 transitions. [2022-12-13 18:17:17,891 INFO L335 stractBuchiCegarLoop]: ======== Iteration 37 ============ [2022-12-13 18:17:17,891 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18864 states and 32245 transitions. [2022-12-13 18:17:17,927 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10657 [2022-12-13 18:17:17,927 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:17,927 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:17,929 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:17,929 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:17,930 INFO L748 eck$LassoCheckResult]: Stem: 6233032#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6233033#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6234893#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6234094#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6234095#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6234410#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6235773#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6235774#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6233798#L493 assume !(0 == getOrigin_~person#1); 6233799#L497 assume !(1 == getOrigin_~person#1); 6233916#L501 assume !(2 == getOrigin_~person#1); 6233917#L505 assume !(3 == getOrigin_~person#1); 6233519#L509 assume !(4 == getOrigin_~person#1); 6233520#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6233057#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6233058#L932 assume !(0 == initPersonOnFloor_~floor#1); 6233629#L959 assume 1 == initPersonOnFloor_~floor#1; 6234785#L960 assume !(0 == initPersonOnFloor_~person#1); 6235691#L963 assume !(1 == initPersonOnFloor_~person#1); 6232514#L966 assume !(2 == initPersonOnFloor_~person#1); 6232515#L969 assume !(3 == initPersonOnFloor_~person#1); 6233008#L972 assume !(4 == initPersonOnFloor_~person#1); 6235699#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6235647#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6235648#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6235809#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6233390#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6235349#L724 assume !(0 == callOnFloor_~floorID#1); 6233800#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6233801#L736-2 assume { :end_inline_callOnFloor } true; 6235060#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6233734#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6233381#L493-1 assume !(0 == getOrigin_~person#1); 6233382#L497-1 assume !(1 == getOrigin_~person#1); 6235963#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6233654#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6233655#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6234160#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6235783#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6235624#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6233597#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6233598#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6234607#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6234985#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6234986#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6235976#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6235620#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6235517#L724-2 assume !(0 == callOnFloor_~floorID#1); 6232793#L727-2 assume !(1 == callOnFloor_~floorID#1); 6232794#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6236107#L736-5 assume { :end_inline_callOnFloor } true; 6235064#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6234512#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6234513#L656 assume !(0 == isFloorCalling_~floorID#1); 6234049#L660 assume !(1 == isFloorCalling_~floorID#1); 6234050#L664 assume !(2 == isFloorCalling_~floorID#1); 6234909#L668 assume !(3 == isFloorCalling_~floorID#1); 6234910#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6232741#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6232742#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6234783#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6234784#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6234235#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6234236#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6234263#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6232618#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6233002#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6233003#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6233283#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6233284#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6234120#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6234121#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6235584#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6235585#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6235996#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6235466#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6235467#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6233670#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6233671#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6232818#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6232819#L2355 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir#1); 6235937#L2524 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6233977#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6233978#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6235492#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6235493#L2760 assume !(1 == ~currentHeading~0); 6234797#L2770 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6234798#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6236474#L2776-1 assume { :end_inline_continueInDirection } true; 6236472#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6236470#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6236465#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6236460#$Ultimate##2835 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6236428#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6236433#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6236431#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6236423#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6236420#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6236416#L198-2 assume !false; 6236417#L199 [2022-12-13 18:17:17,930 INFO L750 eck$LassoCheckResult]: Loop: 6236417#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6244993#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6244991#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6244990#L206 assume 1 != cleanup_~tmp___0~0#1; 6244870#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6244867#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6244837#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6244835#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6244822#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6244811#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6244810#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6244809#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6244808#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6244807#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6244806#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6244805#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6244804#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6244803#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6244802#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6244801#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6244799#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6244798#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6244795#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6244774#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6244772#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6244669#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6244665#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6241800#L3063-3 assume !(1 == ~doorState~0); 6241797#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241796#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6241795#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6241794#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6241793#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6241791#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241788#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6241785#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6241782#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6241778#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6241775#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6241766#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6241707#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6241698#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6241687#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6241681#L2760-3 assume !(1 == ~currentHeading~0); 6241675#L2770-9 assume !(0 == ~currentFloorID~0); 6241668#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6241382#L2776-7 assume { :end_inline_continueInDirection } true; 6241656#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6241654#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6241652#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6241650#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6241648#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6241646#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6241644#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6241642#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6241640#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6241638#L198-2 assume !false; 6241636#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6241634#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6241632#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6241630#L206 assume 1 != cleanup_~tmp___0~0#1; 6241627#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241624#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241617#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6241597#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6241587#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6241574#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6241567#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6241564#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241563#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6241562#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6241561#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6241560#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6241559#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241558#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6241557#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6241556#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241554#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6241553#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241483#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6241425#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6241420#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6241417#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6241413#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6241408#L3063-3 assume !(1 == ~doorState~0); 6241375#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241374#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6241373#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6241372#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6241371#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6241370#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241359#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6241358#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6241357#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6241355#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6241356#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6241441#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6241421#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6241418#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6241414#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6241410#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6241406#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6241405#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6241404#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6241403#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6241400#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6241399#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6241398#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6241397#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6241396#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6241394#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6241395#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6249100#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6249069#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6249060#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6245693#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6245694#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6249206#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6249204#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6246453#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6246376#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6246375#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6246374#L2776-9 assume { :end_inline_continueInDirection } true; 6246373#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6246372#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6246370#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6246367#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6246365#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6246366#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6246346#L1712-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 6246344#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6246343#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6246342#L198-2 assume !false; 6236417#L199 [2022-12-13 18:17:17,930 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:17,930 INFO L85 PathProgramCache]: Analyzing trace with hash -184952465, now seen corresponding path program 1 times [2022-12-13 18:17:17,930 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:17,930 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1079185373] [2022-12-13 18:17:17,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:17,931 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:17,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:17,977 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:17,977 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:17,977 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1079185373] [2022-12-13 18:17:17,977 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1079185373] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:17,978 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:17,978 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 18:17:17,978 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [454917953] [2022-12-13 18:17:17,978 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:17,978 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:17,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:17,978 INFO L85 PathProgramCache]: Analyzing trace with hash 1854297727, now seen corresponding path program 1 times [2022-12-13 18:17:17,978 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:17,978 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1739350339] [2022-12-13 18:17:17,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:17,978 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:17,984 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:18,052 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 18:17:18,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:18,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1739350339] [2022-12-13 18:17:18,052 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1739350339] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:18,053 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:18,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:18,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1881944162] [2022-12-13 18:17:18,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:18,053 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:18,053 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:18,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:18,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:18,053 INFO L87 Difference]: Start difference. First operand 18864 states and 32245 transitions. cyclomatic complexity: 13386 Second operand has 5 states, 5 states have (on average 19.8) internal successors, (99), 4 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:18,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:18,363 INFO L93 Difference]: Finished difference Result 48840 states and 83945 transitions. [2022-12-13 18:17:18,363 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48840 states and 83945 transitions. [2022-12-13 18:17:18,489 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 28935 [2022-12-13 18:17:18,586 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48840 states to 48823 states and 83924 transitions. [2022-12-13 18:17:18,587 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30982 [2022-12-13 18:17:18,603 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30990 [2022-12-13 18:17:18,604 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48823 states and 83924 transitions. [2022-12-13 18:17:18,604 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:18,604 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48823 states and 83924 transitions. [2022-12-13 18:17:18,624 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48823 states and 83924 transitions. [2022-12-13 18:17:18,784 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48823 to 18648. [2022-12-13 18:17:18,796 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18648 states, 18648 states have (on average 1.7084405834405834) internal successors, (31859), 18647 states have internal predecessors, (31859), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:18,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18648 states to 18648 states and 31859 transitions. [2022-12-13 18:17:18,821 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18648 states and 31859 transitions. [2022-12-13 18:17:18,822 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-12-13 18:17:18,822 INFO L428 stractBuchiCegarLoop]: Abstraction has 18648 states and 31859 transitions. [2022-12-13 18:17:18,822 INFO L335 stractBuchiCegarLoop]: ======== Iteration 38 ============ [2022-12-13 18:17:18,822 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18648 states and 31859 transitions. [2022-12-13 18:17:18,857 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10523 [2022-12-13 18:17:18,857 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:18,857 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:18,859 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:18,859 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:18,859 INFO L748 eck$LassoCheckResult]: Stem: 6300753#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6300754#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6302631#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6301829#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6301830#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6302153#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6303521#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6303522#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6301528#L493 assume !(0 == getOrigin_~person#1); 6301529#L497 assume !(1 == getOrigin_~person#1); 6301645#L501 assume !(2 == getOrigin_~person#1); 6301646#L505 assume !(3 == getOrigin_~person#1); 6301247#L509 assume !(4 == getOrigin_~person#1); 6301248#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6300778#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6300779#L932 assume !(0 == initPersonOnFloor_~floor#1); 6301358#L959 assume 1 == initPersonOnFloor_~floor#1; 6302522#L960 assume !(0 == initPersonOnFloor_~person#1); 6303442#L963 assume !(1 == initPersonOnFloor_~person#1); 6300238#L966 assume !(2 == initPersonOnFloor_~person#1); 6300239#L969 assume !(3 == initPersonOnFloor_~person#1); 6300730#L972 assume !(4 == initPersonOnFloor_~person#1); 6303450#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6303402#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6303403#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6303559#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6301112#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6303090#L724 assume !(0 == callOnFloor_~floorID#1); 6301530#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6301531#L736-2 assume { :end_inline_callOnFloor } true; 6302803#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6301464#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6301100#L493-1 assume !(0 == getOrigin_~person#1); 6301101#L497-1 assume !(1 == getOrigin_~person#1); 6303712#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6301382#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6301383#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6301893#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6303534#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6303378#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6301326#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6301327#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6302349#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6302729#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6302730#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6303725#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6303374#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6303267#L724-2 assume !(0 == callOnFloor_~floorID#1); 6300517#L727-2 assume !(1 == callOnFloor_~floorID#1); 6300518#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6303865#L736-5 assume { :end_inline_callOnFloor } true; 6302807#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6302257#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6302258#L656 assume !(0 == isFloorCalling_~floorID#1); 6301782#L660 assume !(1 == isFloorCalling_~floorID#1); 6301783#L664 assume !(2 == isFloorCalling_~floorID#1); 6302651#L668 assume !(3 == isFloorCalling_~floorID#1); 6302652#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6300465#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6300466#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6302520#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6302521#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6301972#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6301973#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6302001#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6300342#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6300724#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6300725#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6301003#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6301004#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6301854#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6301855#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6303340#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6303341#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6303746#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6303211#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6303212#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6301398#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6301399#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6300542#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6300543#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6303235#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6301794#L2359 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6301710#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6301711#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6303236#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6303237#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6302079#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6302080#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6301586#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6301587#L2776-1 assume { :end_inline_continueInDirection } true; 6305213#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6305212#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6305211#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305207#$Ultimate##2835 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305194#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305199#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305197#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305191#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6305186#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6305159#L198-2 assume !false; 6305160#L199 [2022-12-13 18:17:18,860 INFO L750 eck$LassoCheckResult]: Loop: 6305160#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6305731#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6305730#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6305728#L206 assume 1 != cleanup_~tmp___0~0#1; 6305726#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6305723#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6305720#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6305718#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6305630#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6305618#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6305614#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6305612#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6305610#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6305608#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6305607#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6305606#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6305605#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6305604#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6305599#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6305597#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6305595#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6305596#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6305598#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6305579#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6305577#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6305575#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6305572#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6305569#L3063-3 assume !(1 == ~doorState~0); 6305565#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6305563#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6305561#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6305559#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6305557#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6305555#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6305553#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6305551#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6305538#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6305521#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6305516#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6305506#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6305438#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6305427#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6305428#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6305421#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6303920#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6303921#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6305419#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6305406#L2776-7 assume { :end_inline_continueInDirection } true; 6305404#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6305403#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6305402#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6304793#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6304792#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6304791#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6304790#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6304788#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6304787#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6304786#L198-2 assume !false; 6304784#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6304782#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6304781#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6304780#L206 assume 1 != cleanup_~tmp___0~0#1; 6304778#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6304775#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6304773#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6304772#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6304481#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6304469#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6304467#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6304465#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6304463#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6304462#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6304425#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6304417#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6304416#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6304415#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6304414#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6304413#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6304411#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6304410#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6304333#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6304271#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6304253#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6304245#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6304236#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6304225#L3063-3 assume !(1 == ~doorState~0); 6304210#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6304208#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6304206#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6304203#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6304200#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6304114#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6304078#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6304073#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6304069#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6304066#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6304067#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6305900#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6300629#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6305887#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6305886#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6305885#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6305884#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6305883#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6305882#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6305881#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6305880#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6305879#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6305877#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6305875#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6305831#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6305824#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6305822#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6305799#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6305797#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6305795#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6305793#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6305791#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6305789#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6305762#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6305761#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6305760#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6305759#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6305758#L2776-9 assume { :end_inline_continueInDirection } true; 6305757#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6305756#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6305754#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6305751#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6305749#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6305745#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6305736#L1712-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 6305735#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6305734#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6305733#L198-2 assume !false; 6305160#L199 [2022-12-13 18:17:18,860 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:18,860 INFO L85 PathProgramCache]: Analyzing trace with hash -1081960515, now seen corresponding path program 1 times [2022-12-13 18:17:18,860 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:18,860 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [32265911] [2022-12-13 18:17:18,860 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:18,860 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:18,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:18,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:18,903 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:18,903 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [32265911] [2022-12-13 18:17:18,903 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [32265911] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:18,904 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:18,904 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:18,904 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [89053693] [2022-12-13 18:17:18,904 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:18,904 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:18,904 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:18,904 INFO L85 PathProgramCache]: Analyzing trace with hash -428053114, now seen corresponding path program 1 times [2022-12-13 18:17:18,904 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:18,904 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2063690894] [2022-12-13 18:17:18,904 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:18,904 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:18,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:18,980 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 18:17:18,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:18,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2063690894] [2022-12-13 18:17:18,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2063690894] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:18,980 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:18,980 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:18,980 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187145101] [2022-12-13 18:17:18,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:18,981 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:18,981 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:18,981 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:18,981 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:18,981 INFO L87 Difference]: Start difference. First operand 18648 states and 31859 transitions. cyclomatic complexity: 13216 Second operand has 5 states, 5 states have (on average 20.2) internal successors, (101), 5 states have internal predecessors, (101), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:19,170 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:19,170 INFO L93 Difference]: Finished difference Result 34546 states and 59006 transitions. [2022-12-13 18:17:19,171 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34546 states and 59006 transitions. [2022-12-13 18:17:19,264 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 20115 [2022-12-13 18:17:19,333 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34546 states to 34546 states and 59006 transitions. [2022-12-13 18:17:19,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22060 [2022-12-13 18:17:19,346 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22060 [2022-12-13 18:17:19,346 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34546 states and 59006 transitions. [2022-12-13 18:17:19,347 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:19,347 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34546 states and 59006 transitions. [2022-12-13 18:17:19,361 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34546 states and 59006 transitions. [2022-12-13 18:17:19,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34546 to 18690. [2022-12-13 18:17:19,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18690 states, 18690 states have (on average 1.7067950775815945) internal successors, (31900), 18689 states have internal predecessors, (31900), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:19,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18690 states to 18690 states and 31900 transitions. [2022-12-13 18:17:19,528 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18690 states and 31900 transitions. [2022-12-13 18:17:19,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:17:19,529 INFO L428 stractBuchiCegarLoop]: Abstraction has 18690 states and 31900 transitions. [2022-12-13 18:17:19,529 INFO L335 stractBuchiCegarLoop]: ======== Iteration 39 ============ [2022-12-13 18:17:19,529 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18690 states and 31900 transitions. [2022-12-13 18:17:19,564 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10544 [2022-12-13 18:17:19,564 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:19,564 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:19,566 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:19,566 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:19,567 INFO L748 eck$LassoCheckResult]: Stem: 6353965#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6353966#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6355857#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6355040#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6355041#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6355370#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6356761#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6356762#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6354738#L493 assume !(0 == getOrigin_~person#1); 6354739#L497 assume !(1 == getOrigin_~person#1); 6354855#L501 assume !(2 == getOrigin_~person#1); 6354856#L505 assume !(3 == getOrigin_~person#1); 6354457#L509 assume !(4 == getOrigin_~person#1); 6354458#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6353986#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6353987#L932 assume !(0 == initPersonOnFloor_~floor#1); 6354568#L959 assume 1 == initPersonOnFloor_~floor#1; 6355744#L960 assume !(0 == initPersonOnFloor_~person#1); 6356681#L963 assume !(1 == initPersonOnFloor_~person#1); 6353450#L966 assume !(2 == initPersonOnFloor_~person#1); 6353451#L969 assume !(3 == initPersonOnFloor_~person#1); 6353941#L972 assume !(4 == initPersonOnFloor_~person#1); 6356689#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6356640#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6356641#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6356798#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6354325#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6356326#L724 assume !(0 == callOnFloor_~floorID#1); 6354740#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6354741#L736-2 assume { :end_inline_callOnFloor } true; 6356030#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6354674#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6354316#L493-1 assume !(0 == getOrigin_~person#1); 6354317#L497-1 assume !(1 == getOrigin_~person#1); 6356946#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6354589#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6354590#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6355105#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6356771#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6356613#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6354536#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6354537#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6355564#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6355956#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6355957#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6356960#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6356609#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6356501#L724-2 assume !(0 == callOnFloor_~floorID#1); 6353725#L727-2 assume !(1 == callOnFloor_~floorID#1); 6353726#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6357097#L736-5 assume { :end_inline_callOnFloor } true; 6356037#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6355474#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6355475#L656 assume !(0 == isFloorCalling_~floorID#1); 6354995#L660 assume !(1 == isFloorCalling_~floorID#1); 6354996#L664 assume !(2 == isFloorCalling_~floorID#1); 6355876#L668 assume !(3 == isFloorCalling_~floorID#1); 6355877#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6353677#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6353678#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6355738#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6355739#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6355181#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6355182#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6355212#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6353554#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6353931#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6353932#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6354217#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6354218#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6355061#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6355062#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6356574#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6356575#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6356979#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6356445#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6356446#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6354609#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6354610#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6353754#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6353755#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6356471#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6355007#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6355008#L2365 assume !(~currentFloorID~0 < 0); 6353608#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6353609#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6355161#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6355162#L656-5 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6356410#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6356907#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6355375#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6357224#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6357223#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6356485#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6355293#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6355294#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6354795#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6354796#L2776-1 assume { :end_inline_continueInDirection } true; 6367138#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6367137#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6367136#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6367132#$Ultimate##2835 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6367119#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6367124#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6367122#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6367115#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6367113#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6367110#L198-2 assume !false; 6367111#L199 [2022-12-13 18:17:19,567 INFO L750 eck$LassoCheckResult]: Loop: 6367111#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6369217#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6369215#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6369214#L206 assume 1 != cleanup_~tmp___0~0#1; 6369213#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6368841#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6368838#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6367080#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6366145#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6366133#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6366132#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6362182#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6362178#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6362172#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6362167#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6362162#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6362155#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6362122#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6362117#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6362112#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6362103#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6362077#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6362071#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6362054#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6362047#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6362039#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6362034#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6361993#L3063-3 assume !(1 == ~doorState~0); 6361991#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6361985#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6361983#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6361981#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6361903#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6361900#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6361898#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6361892#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6361889#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6361888#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6361887#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6361884#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6361882#L2365-2 assume !(~currentFloorID~0 < 0); 6361871#$Ultimate##4992 assume ~currentFloorID~0 < 0; 6361876#L2382-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 6361868#L2383-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6361860#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6361846#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6361847#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6360007#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6360008#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6356535#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6356536#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6361738#L2776-7 assume { :end_inline_continueInDirection } true; 6361733#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6361729#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6361722#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6361718#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6361690#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6361685#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6361684#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6361683#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6361682#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6361680#L198-2 assume !false; 6361679#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6361678#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6361676#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6361674#L206 assume 1 != cleanup_~tmp___0~0#1; 6361673#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6361670#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6361665#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6361663#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6361643#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6361617#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6360588#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6357466#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6357465#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6357462#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6357459#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6357458#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6357457#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6357456#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6357454#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6357453#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6357451#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6357449#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6357416#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6357335#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6357333#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6357329#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6357327#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6357318#L3063-3 assume !(1 == ~doorState~0); 6357316#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6357291#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6357282#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6357277#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6357274#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6357270#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6357256#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6357255#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6357254#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6357252#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6357253#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6363336#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6353841#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6363621#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6363620#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6363618#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6363444#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6363442#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6363440#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6363390#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6363386#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6363378#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6363370#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6363367#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6363358#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6363356#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6363357#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6367031#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6355943#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6366179#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6367354#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6367352#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6366175#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6361969#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6357111#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6361853#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6356026#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6354887#L2776-9 assume { :end_inline_continueInDirection } true; 6354888#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6369246#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6369244#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6369241#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6369239#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6369240#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6369226#L1712-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 6369222#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6369220#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6369219#L198-2 assume !false; 6367111#L199 [2022-12-13 18:17:19,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:19,567 INFO L85 PathProgramCache]: Analyzing trace with hash 1206411374, now seen corresponding path program 1 times [2022-12-13 18:17:19,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:19,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [326700463] [2022-12-13 18:17:19,567 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:19,567 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:19,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:19,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:19,623 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:19,623 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [326700463] [2022-12-13 18:17:19,623 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [326700463] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:19,623 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:19,623 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:19,623 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1606857355] [2022-12-13 18:17:19,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:19,624 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:19,624 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:19,624 INFO L85 PathProgramCache]: Analyzing trace with hash -854652369, now seen corresponding path program 1 times [2022-12-13 18:17:19,624 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:19,624 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [489754680] [2022-12-13 18:17:19,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:19,624 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:19,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:19,700 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 18:17:19,700 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:19,700 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [489754680] [2022-12-13 18:17:19,701 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [489754680] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:19,701 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:19,701 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:19,701 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1119841100] [2022-12-13 18:17:19,701 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:19,701 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:19,701 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:19,702 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:19,702 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:19,702 INFO L87 Difference]: Start difference. First operand 18690 states and 31900 transitions. cyclomatic complexity: 13215 Second operand has 5 states, 5 states have (on average 21.6) internal successors, (108), 5 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:19,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:19,969 INFO L93 Difference]: Finished difference Result 19834 states and 33645 transitions. [2022-12-13 18:17:19,969 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19834 states and 33645 transitions. [2022-12-13 18:17:20,018 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 11119 [2022-12-13 18:17:20,081 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19834 states to 19834 states and 33645 transitions. [2022-12-13 18:17:20,081 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12804 [2022-12-13 18:17:20,085 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12804 [2022-12-13 18:17:20,086 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19834 states and 33645 transitions. [2022-12-13 18:17:20,087 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:20,087 INFO L218 hiAutomatonCegarLoop]: Abstraction has 19834 states and 33645 transitions. [2022-12-13 18:17:20,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19834 states and 33645 transitions. [2022-12-13 18:17:20,185 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19834 to 18690. [2022-12-13 18:17:20,197 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18690 states, 18690 states have (on average 1.6966827180310327) internal successors, (31711), 18689 states have internal predecessors, (31711), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:20,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18690 states to 18690 states and 31711 transitions. [2022-12-13 18:17:20,222 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18690 states and 31711 transitions. [2022-12-13 18:17:20,223 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:17:20,223 INFO L428 stractBuchiCegarLoop]: Abstraction has 18690 states and 31711 transitions. [2022-12-13 18:17:20,223 INFO L335 stractBuchiCegarLoop]: ======== Iteration 40 ============ [2022-12-13 18:17:20,223 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18690 states and 31711 transitions. [2022-12-13 18:17:20,259 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10544 [2022-12-13 18:17:20,259 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:20,260 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:20,261 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:20,262 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:20,262 INFO L748 eck$LassoCheckResult]: Stem: 6392503#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6392504#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6394394#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6393580#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6393581#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6393910#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6395310#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6395311#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6393282#L493 assume !(0 == getOrigin_~person#1); 6393283#L497 assume !(1 == getOrigin_~person#1); 6393397#L501 assume !(2 == getOrigin_~person#1); 6393398#L505 assume !(3 == getOrigin_~person#1); 6392999#L509 assume !(4 == getOrigin_~person#1); 6393000#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6392529#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6392530#L932 assume !(0 == initPersonOnFloor_~floor#1); 6393111#L959 assume 1 == initPersonOnFloor_~floor#1; 6394286#L960 assume !(0 == initPersonOnFloor_~person#1); 6395221#L963 assume !(1 == initPersonOnFloor_~person#1); 6391992#L966 assume !(2 == initPersonOnFloor_~person#1); 6391993#L969 assume !(3 == initPersonOnFloor_~person#1); 6392478#L972 assume !(4 == initPersonOnFloor_~person#1); 6395230#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6395179#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6395180#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6395348#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6392865#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6394866#L724 assume !(0 == callOnFloor_~floorID#1); 6393284#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6393285#L736-2 assume { :end_inline_callOnFloor } true; 6394569#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6393218#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6392857#L493-1 assume !(0 == getOrigin_~person#1); 6392858#L497-1 assume !(1 == getOrigin_~person#1); 6395527#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6393135#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6393136#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6393646#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6395320#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6395152#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6393075#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6393076#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6394110#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6394495#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6394496#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6395546#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6395148#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6395043#L724-2 assume !(0 == callOnFloor_~floorID#1); 6392268#L727-2 assume !(1 == callOnFloor_~floorID#1); 6392269#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6395694#L736-5 assume { :end_inline_callOnFloor } true; 6394573#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6394015#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6394016#L656 assume !(0 == isFloorCalling_~floorID#1); 6393534#L660 assume !(1 == isFloorCalling_~floorID#1); 6393535#L664 assume !(2 == isFloorCalling_~floorID#1); 6394413#L668 assume !(3 == isFloorCalling_~floorID#1); 6394414#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6392217#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6392218#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6394284#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6394285#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6393724#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6393725#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6393752#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6392096#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6392472#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6392473#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6392758#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6392759#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6393600#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6393601#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6395112#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6395113#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6395570#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6394988#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6394989#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6393151#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6393152#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6392293#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6392294#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6395013#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6393545#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6393546#L2365 assume !(~currentFloorID~0 < 0); 6392158#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6392159#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6393704#L2395 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1); 6393706#$Ultimate##2358 assume ~currentFloorID~0 < 1; 6393573#L2411 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 6393575#L2412 assume 0 != ~floorButtons_1~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6393915#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6395845#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6395844#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6395026#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6393832#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6393833#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6393338#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6393153#L2776-1 assume { :end_inline_continueInDirection } true; 6392570#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6392571#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6392645#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6392647#$Ultimate##2835 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6392903#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6395321#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6394417#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6392510#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6395654#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6395655#L198-2 assume !false; 6400672#L199 [2022-12-13 18:17:20,262 INFO L750 eck$LassoCheckResult]: Loop: 6400672#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6408452#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6408239#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6407119#L206 assume 1 != cleanup_~tmp___0~0#1; 6407116#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6407113#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6407110#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6407076#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6406262#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6406184#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6406181#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6406177#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6406175#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6406173#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6406171#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6406169#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6406167#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6406165#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6406163#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6406161#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6406159#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6393066#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6392056#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6406208#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6406204#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6406202#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6406200#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6406197#L3063-3 assume !(1 == ~doorState~0); 6406195#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6406194#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6406193#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6406192#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6406191#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6406190#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6395400#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6392324#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6392325#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6393119#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6393120#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6393595#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6393597#L2365-2 assume !(~currentFloorID~0 < 0); 6393583#$Ultimate##4992 assume ~currentFloorID~0 < 0; 6394435#L2382-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 6394437#L2383-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6393785#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6406179#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6401002#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6401001#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6395747#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6395075#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6395076#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6402833#L2776-7 assume { :end_inline_continueInDirection } true; 6402831#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6402830#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6402829#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6402825#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6402823#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6402822#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6402821#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6402820#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6402819#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6402818#L198-2 assume !false; 6402817#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6402816#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6402815#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6402813#L206 assume 1 != cleanup_~tmp___0~0#1; 6402811#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6402809#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6402806#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6402805#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6401933#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6401915#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6401913#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6401429#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6401402#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6401400#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6401398#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6401386#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6401384#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6401383#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6401382#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6401381#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6401380#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6401379#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6401374#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6401358#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6401356#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6401355#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6401353#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6401348#L3063-3 assume !(1 == ~doorState~0); 6401346#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6401345#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6401344#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6401343#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6401342#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6401341#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6401307#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6401167#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6400954#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6400950#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6400951#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6403138#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6392378#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6403117#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6403114#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6403110#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6403105#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6403098#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6403096#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6403094#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6403092#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6403091#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6403090#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6403087#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6403085#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6403082#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6403083#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6409715#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6395573#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6409714#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6409711#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6409562#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6409561#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6409560#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6395717#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6409241#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6409240#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6409239#L2776-9 assume { :end_inline_continueInDirection } true; 6409238#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6409237#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6409235#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6409232#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6409218#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6409223#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6409221#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6409216#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6409215#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6408455#L198-2 assume !false; 6400672#L199 [2022-12-13 18:17:20,262 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:20,262 INFO L85 PathProgramCache]: Analyzing trace with hash 1284122417, now seen corresponding path program 1 times [2022-12-13 18:17:20,262 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:20,262 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452954794] [2022-12-13 18:17:20,263 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:20,263 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:20,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:20,321 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:20,321 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:20,321 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452954794] [2022-12-13 18:17:20,321 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1452954794] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:20,321 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:20,321 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:20,321 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1543416589] [2022-12-13 18:17:20,322 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:20,322 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:20,322 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:20,322 INFO L85 PathProgramCache]: Analyzing trace with hash 1454391981, now seen corresponding path program 1 times [2022-12-13 18:17:20,322 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:20,322 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1412872215] [2022-12-13 18:17:20,322 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:20,322 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:20,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:20,428 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-13 18:17:20,428 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:20,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1412872215] [2022-12-13 18:17:20,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1412872215] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:20,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:20,429 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:20,429 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [942936369] [2022-12-13 18:17:20,429 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:20,429 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:20,429 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:20,429 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:17:20,429 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:17:20,430 INFO L87 Difference]: Start difference. First operand 18690 states and 31711 transitions. cyclomatic complexity: 13026 Second operand has 6 states, 6 states have (on average 18.0) internal successors, (108), 6 states have internal predecessors, (108), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:20,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:20,622 INFO L93 Difference]: Finished difference Result 20292 states and 34330 transitions. [2022-12-13 18:17:20,622 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20292 states and 34330 transitions. [2022-12-13 18:17:20,688 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 11335 [2022-12-13 18:17:20,730 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20292 states to 20292 states and 34330 transitions. [2022-12-13 18:17:20,731 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12887 [2022-12-13 18:17:20,737 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12887 [2022-12-13 18:17:20,737 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20292 states and 34330 transitions. [2022-12-13 18:17:20,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:20,737 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20292 states and 34330 transitions. [2022-12-13 18:17:20,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20292 states and 34330 transitions. [2022-12-13 18:17:20,856 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20292 to 18690. [2022-12-13 18:17:20,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18690 states, 18690 states have (on average 1.685928303905832) internal successors, (31510), 18689 states have internal predecessors, (31510), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:20,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18690 states to 18690 states and 31510 transitions. [2022-12-13 18:17:20,908 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18690 states and 31510 transitions. [2022-12-13 18:17:20,909 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 18:17:20,909 INFO L428 stractBuchiCegarLoop]: Abstraction has 18690 states and 31510 transitions. [2022-12-13 18:17:20,909 INFO L335 stractBuchiCegarLoop]: ======== Iteration 41 ============ [2022-12-13 18:17:20,910 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18690 states and 31510 transitions. [2022-12-13 18:17:20,942 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10544 [2022-12-13 18:17:20,942 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:20,942 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:20,944 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:20,944 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:20,944 INFO L748 eck$LassoCheckResult]: Stem: 6431500#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6431501#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6433359#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6432564#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6432565#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6432885#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6434221#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6434222#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6432274#L493 assume !(0 == getOrigin_~person#1); 6432275#L497 assume !(1 == getOrigin_~person#1); 6432388#L501 assume !(2 == getOrigin_~person#1); 6432389#L505 assume !(3 == getOrigin_~person#1); 6431994#L509 assume !(4 == getOrigin_~person#1); 6431995#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6431525#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6431526#L932 assume !(0 == initPersonOnFloor_~floor#1); 6432104#L959 assume 1 == initPersonOnFloor_~floor#1; 6433251#L960 assume !(0 == initPersonOnFloor_~person#1); 6434136#L963 assume !(1 == initPersonOnFloor_~person#1); 6430994#L966 assume !(2 == initPersonOnFloor_~person#1); 6430995#L969 assume !(3 == initPersonOnFloor_~person#1); 6431478#L972 assume !(4 == initPersonOnFloor_~person#1); 6434145#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6434098#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6434099#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6434258#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6431861#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6433805#L724 assume !(0 == callOnFloor_~floorID#1); 6432276#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6432277#L736-2 assume { :end_inline_callOnFloor } true; 6433524#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6432211#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6431852#L493-1 assume !(0 == getOrigin_~person#1); 6431853#L497-1 assume !(1 == getOrigin_~person#1); 6434393#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6432129#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6432130#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6432628#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6434233#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6434071#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6432072#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6432073#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6433079#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6433453#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6433454#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6434406#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6434066#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6433965#L724-2 assume !(0 == callOnFloor_~floorID#1); 6431269#L727-2 assume !(1 == callOnFloor_~floorID#1); 6431270#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6434523#L736-5 assume { :end_inline_callOnFloor } true; 6433528#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6432986#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6432987#L656 assume !(0 == isFloorCalling_~floorID#1); 6432519#L660 assume !(1 == isFloorCalling_~floorID#1); 6432520#L664 assume !(2 == isFloorCalling_~floorID#1); 6433377#L668 assume !(3 == isFloorCalling_~floorID#1); 6433378#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6431219#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6431220#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6433249#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6433250#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6432702#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6432703#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6432730#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6431098#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6431472#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6431473#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6431753#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6431754#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6432588#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6432589#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6434034#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6434035#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6434430#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6433918#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6433919#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6432145#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6432146#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6431294#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6431295#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6433940#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6432529#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6432530#L2365 assume !(~currentFloorID~0 < 0); 6431160#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6431161#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6432683#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6432684#L656-5 assume !(0 == isFloorCalling_~floorID#1); 6433884#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6433885#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6434357#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6432890#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6434619#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6434618#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6433951#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6432810#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6432811#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6432330#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6432147#L2776-1 assume { :end_inline_continueInDirection } true; 6432001#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6437179#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6437109#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6433641#$Ultimate##2835 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6431013#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6431014#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6433381#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6431507#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6442437#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6442433#L198-2 assume !false; 6439206#L199 [2022-12-13 18:17:20,944 INFO L750 eck$LassoCheckResult]: Loop: 6439206#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6439204#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6439202#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6439200#L206 assume 1 != cleanup_~tmp___0~0#1; 6439198#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6439195#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6439192#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6439190#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6439163#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6439151#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6439149#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6439148#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6439147#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6439146#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6439145#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6439144#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6439143#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6439142#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6439140#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6439138#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6439136#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6439134#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6439128#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6439066#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6439064#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6439063#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6439061#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6439059#L3063-3 assume !(1 == ~doorState~0); 6439056#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6439054#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6439052#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6439050#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6439049#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6439048#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6439047#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6439046#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6439045#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6439043#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6439041#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6439037#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6439034#L2365-2 assume !(~currentFloorID~0 < 0); 6438847#$Ultimate##4992 assume ~currentFloorID~0 < 0; 6439033#L2382-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1; 6438844#L2383-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6438832#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6440055#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6440051#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6437941#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6437936#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6437926#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6437920#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6437916#L2776-7 assume { :end_inline_continueInDirection } true; 6437913#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6437911#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6437909#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6437907#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6437905#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6437903#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6437901#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6437899#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6437897#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6437895#L198-2 assume !false; 6437886#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6437880#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6437866#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6437860#L206 assume 1 != cleanup_~tmp___0~0#1; 6437843#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6437837#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6437825#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6437818#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6437811#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6437799#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6437797#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6437795#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6437793#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6437789#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6437787#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6437784#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6437783#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6437782#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6437781#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6437780#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6437778#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6437773#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6437758#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6437753#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6437749#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6437747#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6437745#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6437742#L3063-3 assume !(1 == ~doorState~0); 6437740#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6437739#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6437738#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6437737#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6437736#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6437735#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6437734#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6437733#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6437732#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6437730#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6437731#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6442622#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6431379#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6433754#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6433755#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6433900#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6434432#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6433482#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6433483#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6442332#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6442331#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6442330#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6442328#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6442327#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6442326#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6442324#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6442323#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6438882#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6438862#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6447592#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6447591#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6447590#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6447589#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6447588#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6438796#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6447587#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6447585#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6447566#L2776-9 assume { :end_inline_continueInDirection } true; 6447565#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6447562#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6447554#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6447549#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6447527#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6447532#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6447530#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6447493#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6444901#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6439208#L198-2 assume !false; 6439206#L199 [2022-12-13 18:17:20,945 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:20,945 INFO L85 PathProgramCache]: Analyzing trace with hash 81591192, now seen corresponding path program 1 times [2022-12-13 18:17:20,945 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:20,945 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [536681881] [2022-12-13 18:17:20,945 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:20,945 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:20,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:21,032 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:21,032 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:21,032 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [536681881] [2022-12-13 18:17:21,032 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [536681881] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:21,032 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:21,033 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:21,033 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [508814666] [2022-12-13 18:17:21,033 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:21,033 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:21,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:21,033 INFO L85 PathProgramCache]: Analyzing trace with hash 1454391981, now seen corresponding path program 2 times [2022-12-13 18:17:21,033 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:21,034 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773307911] [2022-12-13 18:17:21,034 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:21,034 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:21,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:21,126 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-13 18:17:21,126 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:21,127 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773307911] [2022-12-13 18:17:21,127 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [773307911] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:21,127 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:21,127 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:21,127 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [720030887] [2022-12-13 18:17:21,127 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:21,127 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:21,127 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:21,128 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:17:21,128 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:17:21,128 INFO L87 Difference]: Start difference. First operand 18690 states and 31510 transitions. cyclomatic complexity: 12825 Second operand has 6 states, 6 states have (on average 18.166666666666668) internal successors, (109), 5 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:21,961 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:21,961 INFO L93 Difference]: Finished difference Result 58249 states and 97955 transitions. [2022-12-13 18:17:21,961 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 58249 states and 97955 transitions. [2022-12-13 18:17:22,138 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 34090 [2022-12-13 18:17:22,266 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 58249 states to 58179 states and 97880 transitions. [2022-12-13 18:17:22,266 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37174 [2022-12-13 18:17:22,289 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37174 [2022-12-13 18:17:22,289 INFO L73 IsDeterministic]: Start isDeterministic. Operand 58179 states and 97880 transitions. [2022-12-13 18:17:22,289 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:22,289 INFO L218 hiAutomatonCegarLoop]: Abstraction has 58179 states and 97880 transitions. [2022-12-13 18:17:22,317 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 58179 states and 97880 transitions. [2022-12-13 18:17:22,553 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 58179 to 34916. [2022-12-13 18:17:22,576 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34916 states, 34916 states have (on average 1.6854164279986252) internal successors, (58848), 34915 states have internal predecessors, (58848), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:22,623 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34916 states to 34916 states and 58848 transitions. [2022-12-13 18:17:22,623 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34916 states and 58848 transitions. [2022-12-13 18:17:22,623 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 18:17:22,624 INFO L428 stractBuchiCegarLoop]: Abstraction has 34916 states and 58848 transitions. [2022-12-13 18:17:22,624 INFO L335 stractBuchiCegarLoop]: ======== Iteration 42 ============ [2022-12-13 18:17:22,624 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34916 states and 58848 transitions. [2022-12-13 18:17:22,693 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 21174 [2022-12-13 18:17:22,693 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:22,693 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:22,695 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:22,695 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:22,696 INFO L748 eck$LassoCheckResult]: Stem: 6508464#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6508465#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6510330#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6509529#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6509530#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6509850#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6511213#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6511214#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6509237#L493 assume !(0 == getOrigin_~person#1); 6509238#L497 assume !(1 == getOrigin_~person#1); 6509353#L501 assume !(2 == getOrigin_~person#1); 6509354#L505 assume !(3 == getOrigin_~person#1); 6508958#L509 assume !(4 == getOrigin_~person#1); 6508959#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6508485#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6508486#L932 assume !(0 == initPersonOnFloor_~floor#1); 6509068#L959 assume 1 == initPersonOnFloor_~floor#1; 6510220#L960 assume !(0 == initPersonOnFloor_~person#1); 6511131#L963 assume !(1 == initPersonOnFloor_~person#1); 6507958#L966 assume !(2 == initPersonOnFloor_~person#1); 6507959#L969 assume !(3 == initPersonOnFloor_~person#1); 6508440#L972 assume !(4 == initPersonOnFloor_~person#1); 6511139#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6511091#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6511092#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6511255#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6508824#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6510780#L724 assume !(0 == callOnFloor_~floorID#1); 6509239#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6509240#L736-2 assume { :end_inline_callOnFloor } true; 6510494#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6509173#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6508814#L493-1 assume !(0 == getOrigin_~person#1); 6508815#L497-1 assume !(1 == getOrigin_~person#1); 6511411#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6509088#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6509089#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6509591#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6511226#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6511063#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6509035#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6509036#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6510044#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6510425#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6510426#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6511425#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6511058#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6510954#L724-2 assume !(0 == callOnFloor_~floorID#1); 6508227#L727-2 assume !(1 == callOnFloor_~floorID#1); 6508228#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6511564#L736-5 assume { :end_inline_callOnFloor } true; 6510500#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6509951#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6509952#L656 assume !(0 == isFloorCalling_~floorID#1); 6509484#L660 assume !(1 == isFloorCalling_~floorID#1); 6509485#L664 assume !(2 == isFloorCalling_~floorID#1); 6510349#L668 assume !(3 == isFloorCalling_~floorID#1); 6510350#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6508182#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6508183#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6510214#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6510215#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6509665#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6509666#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6509695#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6508061#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6508430#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6508431#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6508716#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6508717#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6509548#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6509549#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6511022#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6511023#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6511453#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6510906#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6510907#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6509108#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6509109#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6508256#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6508257#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6510926#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6509496#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6509497#L2365 assume !(~currentFloorID~0 < 0); 6508115#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6508116#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6509646#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6509647#L656-5 assume !(0 == isFloorCalling_~floorID#1); 6510871#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6510872#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6511370#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6509855#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6511690#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6511689#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6510940#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6509773#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6509774#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6509294#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6509295#L2776-1 assume { :end_inline_continueInDirection } true; 6511702#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6511701#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6508606#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6508607#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6509267#L1708 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6509268#areDoorsOpen_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6512299#L1712 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 6512298#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6512296#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6512287#L198-2 assume !false; 6512288#L199 [2022-12-13 18:17:22,696 INFO L750 eck$LassoCheckResult]: Loop: 6512288#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6533635#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6533634#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6533633#L206 assume 1 != cleanup_~tmp___0~0#1; 6533632#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6533630#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6533628#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6524800#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6524801#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6524776#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6524777#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6524770#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6524771#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6524764#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6524765#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6524758#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6524759#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6524751#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6524752#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6524745#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6524742#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6524744#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6533360#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6533349#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6533348#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6533347#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6533346#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6533345#L3063-3 assume !(1 == ~doorState~0); 6533343#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6533342#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6533341#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6533340#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6533339#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6533338#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6533337#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6533336#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6533335#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6533334#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6533333#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6533332#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6524691#L2365-2 assume !(~currentFloorID~0 < 0); 6524690#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 6524688#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 6524686#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 6524683#$Ultimate##5020 assume ~currentFloorID~0 < 2; 6524678#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6524671#L656-36 assume !(0 == isFloorCalling_~floorID#1); 6524672#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6533236#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 6524634#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6524635#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6524630#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6524631#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6524625#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6524626#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6510987#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6510935#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6510936#L2776-7 assume { :end_inline_continueInDirection } true; 6509384#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6536477#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6536476#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6536475#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6536474#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6536473#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6536472#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6536471#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6536470#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6536469#L198-2 assume !false; 6536468#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6536467#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6536466#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6536465#L206 assume 1 != cleanup_~tmp___0~0#1; 6536462#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6536457#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6536451#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6536440#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6536434#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6536423#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6536422#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6536421#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6536420#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6536419#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6536418#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6536417#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6536416#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6536415#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6536414#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6536413#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6536411#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6536410#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6536405#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6536403#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6536399#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6536400#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6537413#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6536383#L3063-3 assume !(1 == ~doorState~0); 6536380#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6536379#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6536378#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6536377#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6536376#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6536375#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6536368#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6536366#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6536362#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6536360#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6536358#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6536356#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6536354#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6536353#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6536352#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6536351#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6536345#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6536343#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6536339#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6536337#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6536335#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6536333#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6536331#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6536329#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6536327#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6536325#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6536110#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6536088#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6536073#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6536041#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6536039#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6536033#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6536032#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6534267#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6534266#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6534265#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6533647#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6533645#L2776-9 assume { :end_inline_continueInDirection } true; 6524863#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6524862#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6524861#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6524859#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6524857#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6524858#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6533639#L1712-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1;~landingButtons_spc1_1~0 := 0; 6533638#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6533637#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6533636#L198-2 assume !false; 6512288#L199 [2022-12-13 18:17:22,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:22,696 INFO L85 PathProgramCache]: Analyzing trace with hash 2067514138, now seen corresponding path program 1 times [2022-12-13 18:17:22,696 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:22,696 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1850695203] [2022-12-13 18:17:22,696 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:22,696 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:22,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:22,744 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:22,744 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:22,744 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1850695203] [2022-12-13 18:17:22,744 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1850695203] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:22,744 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:22,744 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:22,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522553621] [2022-12-13 18:17:22,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:22,744 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:22,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:22,744 INFO L85 PathProgramCache]: Analyzing trace with hash 2024865329, now seen corresponding path program 1 times [2022-12-13 18:17:22,745 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:22,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2092856691] [2022-12-13 18:17:22,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:22,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:22,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:22,822 INFO L134 CoverageAnalysis]: Checked inductivity of 50 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 18:17:22,822 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:22,822 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2092856691] [2022-12-13 18:17:22,823 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2092856691] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:22,823 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:22,823 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:22,823 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [554085582] [2022-12-13 18:17:22,823 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:22,823 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:22,823 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:22,823 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:22,823 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:22,823 INFO L87 Difference]: Start difference. First operand 34916 states and 58848 transitions. cyclomatic complexity: 23943 Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 5 states have internal predecessors, (109), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:23,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:23,272 INFO L93 Difference]: Finished difference Result 114624 states and 193711 transitions. [2022-12-13 18:17:23,272 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 114624 states and 193711 transitions. [2022-12-13 18:17:23,714 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 69469 [2022-12-13 18:17:23,989 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 114624 states to 114624 states and 193711 transitions. [2022-12-13 18:17:23,989 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 77263 [2022-12-13 18:17:24,036 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 77263 [2022-12-13 18:17:24,036 INFO L73 IsDeterministic]: Start isDeterministic. Operand 114624 states and 193711 transitions. [2022-12-13 18:17:24,036 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:24,037 INFO L218 hiAutomatonCegarLoop]: Abstraction has 114624 states and 193711 transitions. [2022-12-13 18:17:24,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 114624 states and 193711 transitions. [2022-12-13 18:17:24,480 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 114624 to 34916. [2022-12-13 18:17:24,503 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34916 states, 34916 states have (on average 1.6850154656890823) internal successors, (58834), 34915 states have internal predecessors, (58834), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:24,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34916 states to 34916 states and 58834 transitions. [2022-12-13 18:17:24,550 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34916 states and 58834 transitions. [2022-12-13 18:17:24,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 18:17:24,551 INFO L428 stractBuchiCegarLoop]: Abstraction has 34916 states and 58834 transitions. [2022-12-13 18:17:24,551 INFO L335 stractBuchiCegarLoop]: ======== Iteration 43 ============ [2022-12-13 18:17:24,551 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34916 states and 58834 transitions. [2022-12-13 18:17:24,619 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 21174 [2022-12-13 18:17:24,620 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:24,620 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:24,621 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:24,621 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:24,622 INFO L748 eck$LassoCheckResult]: Stem: 6658027#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6658028#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6659893#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6659095#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6659096#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6659413#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6660765#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6660766#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6658802#L493 assume !(0 == getOrigin_~person#1); 6658803#L497 assume !(1 == getOrigin_~person#1); 6658917#L501 assume !(2 == getOrigin_~person#1); 6658918#L505 assume !(3 == getOrigin_~person#1); 6658523#L509 assume !(4 == getOrigin_~person#1); 6658524#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6658052#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6658053#L932 assume !(0 == initPersonOnFloor_~floor#1); 6658633#L959 assume 1 == initPersonOnFloor_~floor#1; 6659781#L960 assume !(0 == initPersonOnFloor_~person#1); 6660685#L963 assume !(1 == initPersonOnFloor_~person#1); 6657518#L966 assume !(2 == initPersonOnFloor_~person#1); 6657519#L969 assume !(3 == initPersonOnFloor_~person#1); 6658002#L972 assume !(4 == initPersonOnFloor_~person#1); 6660693#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6660646#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6660647#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6660804#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6658390#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6660347#L724 assume !(0 == callOnFloor_~floorID#1); 6658804#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6658805#L736-2 assume { :end_inline_callOnFloor } true; 6660063#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6658737#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6658381#L493-1 assume !(0 == getOrigin_~person#1); 6658382#L497-1 assume !(1 == getOrigin_~person#1); 6660961#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6658657#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6658658#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6659156#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6660775#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6660622#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6658600#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6658601#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6659607#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6659988#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6659989#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6660980#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6660617#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6660514#L724-2 assume !(0 == callOnFloor_~floorID#1); 6657791#L727-2 assume !(1 == callOnFloor_~floorID#1); 6657792#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6661096#L736-5 assume { :end_inline_callOnFloor } true; 6660067#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6659514#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6659515#L656 assume !(0 == isFloorCalling_~floorID#1); 6659050#L660 assume !(1 == isFloorCalling_~floorID#1); 6659051#L664 assume !(2 == isFloorCalling_~floorID#1); 6659913#L668 assume !(3 == isFloorCalling_~floorID#1); 6659914#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6657742#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6657743#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6659779#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6659780#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6659232#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6659233#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6659260#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6657621#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6657996#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6657997#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6658283#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6658284#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6659118#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6659119#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6660582#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6660583#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6661000#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6660466#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6660467#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6658673#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6658674#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6657816#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6657817#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6660488#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6659060#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6659061#L2365 assume !(~currentFloorID~0 < 0); 6657683#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6657684#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6659213#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6659214#L656-5 assume !(0 == isFloorCalling_~floorID#1); 6660432#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6660433#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6660919#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6659418#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6661209#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6661208#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6660500#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6659337#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6659338#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6660897#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6661213#L2776-1 assume { :end_inline_continueInDirection } true; 6661212#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6661211#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6658171#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6658172#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6658832#L1708 assume !(0 != ~landingButtons_spc1_1~0); 6657537#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6657538#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6662865#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6661201#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6661202#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6662863#L198-2 assume !false; 6662864#L199 [2022-12-13 18:17:24,622 INFO L750 eck$LassoCheckResult]: Loop: 6662864#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6686331#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6686330#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6686328#L206 assume 1 != cleanup_~tmp___0~0#1; 6686325#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6686316#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6686309#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6686307#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6686258#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6686242#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6686228#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6686226#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6686224#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6686222#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6686220#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6686218#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6686216#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6686214#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6686212#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6686210#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6686206#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6686198#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6686183#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6686178#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6686174#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6686172#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6686170#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6686167#L3063-3 assume !(1 == ~doorState~0); 6686164#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6686162#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6686160#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6686155#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6686153#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6686152#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6686151#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6686149#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6686130#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6686129#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6686090#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6686083#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6684020#L2365-2 assume !(~currentFloorID~0 < 0); 6684018#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 6684016#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 6684014#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 6684012#$Ultimate##5020 assume ~currentFloorID~0 < 2; 6684010#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6684008#L656-36 assume !(0 == isFloorCalling_~floorID#1); 6684006#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6684001#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 6683466#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6683464#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6683460#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6683456#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6659500#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6659501#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6660546#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6660495#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6660496#L2776-7 assume { :end_inline_continueInDirection } true; 6658948#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6685275#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6685273#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6685272#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6685271#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6685267#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6685266#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6685265#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6685264#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6685263#L198-2 assume !false; 6685261#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6685259#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6685258#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6685257#L206 assume 1 != cleanup_~tmp___0~0#1; 6685255#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6685252#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6685249#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6685233#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6685226#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6685215#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6685214#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6685213#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6685212#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6685211#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6685208#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6685207#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6685206#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6685205#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6685204#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6685203#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6685202#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6685042#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6685033#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6685029#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6685028#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6685022#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6685020#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6684240#L3063-3 assume !(1 == ~doorState~0); 6684238#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6684237#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6684236#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6684235#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6684234#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6684233#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6684232#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6684231#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6684230#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6684229#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6684228#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6684227#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6684226#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6684225#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6684224#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6684223#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6684222#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6684221#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6684220#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6684219#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6684218#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6684217#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6684216#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6684215#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6684214#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6684213#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6684212#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6684211#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6684210#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6684209#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6684208#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6684207#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6684206#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6684205#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6684204#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6669279#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6669280#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6686345#L2776-9 assume { :end_inline_continueInDirection } true; 6686344#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6686343#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6686342#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6686341#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6686339#L1708-1 assume !(0 != ~landingButtons_spc1_1~0); 6686337#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6686336#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6686335#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6686334#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6686333#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6686332#L198-2 assume !false; 6662864#L199 [2022-12-13 18:17:24,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:24,622 INFO L85 PathProgramCache]: Analyzing trace with hash 885278548, now seen corresponding path program 1 times [2022-12-13 18:17:24,622 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:24,622 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [620559974] [2022-12-13 18:17:24,622 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:24,623 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:24,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:24,674 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:24,674 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:24,675 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [620559974] [2022-12-13 18:17:24,675 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [620559974] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:24,675 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:24,675 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:24,675 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2099424083] [2022-12-13 18:17:24,675 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:24,675 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:24,675 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:24,675 INFO L85 PathProgramCache]: Analyzing trace with hash -436647756, now seen corresponding path program 1 times [2022-12-13 18:17:24,676 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:24,676 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1897637293] [2022-12-13 18:17:24,676 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:24,676 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:24,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:24,758 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-13 18:17:24,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:24,758 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1897637293] [2022-12-13 18:17:24,758 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1897637293] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:24,758 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:24,758 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:24,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936974763] [2022-12-13 18:17:24,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:24,759 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:24,759 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:24,759 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:24,759 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:24,759 INFO L87 Difference]: Start difference. First operand 34916 states and 58834 transitions. cyclomatic complexity: 23929 Second operand has 5 states, 5 states have (on average 22.0) internal successors, (110), 5 states have internal predecessors, (110), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:24,969 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:24,969 INFO L93 Difference]: Finished difference Result 69725 states and 117481 transitions. [2022-12-13 18:17:24,969 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69725 states and 117481 transitions. [2022-12-13 18:17:25,174 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42302 [2022-12-13 18:17:25,309 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69725 states to 69725 states and 117481 transitions. [2022-12-13 18:17:25,309 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46377 [2022-12-13 18:17:25,336 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46377 [2022-12-13 18:17:25,336 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69725 states and 117481 transitions. [2022-12-13 18:17:25,337 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:25,337 INFO L218 hiAutomatonCegarLoop]: Abstraction has 69725 states and 117481 transitions. [2022-12-13 18:17:25,371 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69725 states and 117481 transitions. [2022-12-13 18:17:25,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69725 to 69725. [2022-12-13 18:17:25,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 69725 states, 69725 states have (on average 1.68491932592327) internal successors, (117481), 69724 states have internal predecessors, (117481), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:25,888 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 69725 states to 69725 states and 117481 transitions. [2022-12-13 18:17:25,888 INFO L240 hiAutomatonCegarLoop]: Abstraction has 69725 states and 117481 transitions. [2022-12-13 18:17:25,889 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 18:17:25,889 INFO L428 stractBuchiCegarLoop]: Abstraction has 69725 states and 117481 transitions. [2022-12-13 18:17:25,889 INFO L335 stractBuchiCegarLoop]: ======== Iteration 44 ============ [2022-12-13 18:17:25,889 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 69725 states and 117481 transitions. [2022-12-13 18:17:26,043 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42302 [2022-12-13 18:17:26,043 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:26,043 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:26,045 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:26,045 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:26,045 INFO L748 eck$LassoCheckResult]: Stem: 6762685#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6762686#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6764606#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6763769#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6763770#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6764105#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6765561#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6765562#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6763470#L493 assume !(0 == getOrigin_~person#1); 6763471#L497 assume !(1 == getOrigin_~person#1); 6763588#L501 assume !(2 == getOrigin_~person#1); 6763589#L505 assume !(3 == getOrigin_~person#1); 6763187#L509 assume !(4 == getOrigin_~person#1); 6763188#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6762706#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6762707#L932 assume !(0 == initPersonOnFloor_~floor#1); 6763296#L959 assume 1 == initPersonOnFloor_~floor#1; 6764492#L960 assume !(0 == initPersonOnFloor_~person#1); 6765468#L963 assume !(1 == initPersonOnFloor_~person#1); 6762176#L966 assume !(2 == initPersonOnFloor_~person#1); 6762177#L969 assume !(3 == initPersonOnFloor_~person#1); 6762661#L972 assume !(4 == initPersonOnFloor_~person#1); 6765478#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6765427#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6765428#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6765615#L1657 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6763407#L1660 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6763050#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6766144#L724 assume !(0 == callOnFloor_~floorID#1); 6763472#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6763473#L736-2 assume { :end_inline_callOnFloor } true; 6764782#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6764783#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6763041#L493-1 assume !(0 == getOrigin_~person#1); 6763042#L497-1 assume !(1 == getOrigin_~person#1); 6766160#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6766161#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6763833#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6763834#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6765576#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6765577#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6763266#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6763267#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6766139#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6766140#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6765818#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6765819#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6765387#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6765388#L724-2 assume !(0 == callOnFloor_~floorID#1); 6762446#L727-2 assume !(1 == callOnFloor_~floorID#1); 6762447#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6765991#L736-5 assume { :end_inline_callOnFloor } true; 6765992#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6764218#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6764219#L656 assume !(0 == isFloorCalling_~floorID#1); 6763721#L660 assume !(1 == isFloorCalling_~floorID#1); 6763722#L664 assume !(2 == isFloorCalling_~floorID#1); 6764626#L668 assume !(3 == isFloorCalling_~floorID#1); 6764627#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6762400#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6762401#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6764486#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6764487#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6763911#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6763912#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6763943#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6762279#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6762651#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6762652#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6762942#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6762943#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6763788#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6763789#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6765350#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6765351#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6765845#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6765220#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6765221#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6763337#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6763338#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6762475#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6762476#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6765245#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6763736#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6763737#L2365 assume !(~currentFloorID~0 < 0); 6762333#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6762334#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6763891#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6763892#L656-5 assume !(0 == isFloorCalling_~floorID#1); 6765184#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6765185#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6765744#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6766185#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6766186#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6766181#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6766182#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6764025#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6764026#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6763527#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6763528#L2776-1 assume { :end_inline_continueInDirection } true; 6766211#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6766212#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6762829#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6762830#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6765966#L1708 assume !(0 != ~landingButtons_spc1_1~0); 6778432#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6776638#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6764630#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6764631#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6765940#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6765941#L198-2 assume !false; 6779443#L199 [2022-12-13 18:17:26,045 INFO L750 eck$LassoCheckResult]: Loop: 6779443#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6803698#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6803697#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6803695#L206 assume 1 != cleanup_~tmp___0~0#1; 6803693#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6803691#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6803689#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6803687#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6803175#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6803163#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6803161#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6803159#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6803157#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6803155#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6803153#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6803151#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6803149#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6803147#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6803145#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6803143#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6803140#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6803137#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6803132#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6803110#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6803109#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6803108#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6803105#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6803103#L3063-3 assume !(1 == ~doorState~0); 6803100#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6803098#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6803096#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6803094#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6803089#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6803087#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6803086#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6803085#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6803084#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6803082#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6803080#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6803077#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6803078#L2365-2 assume !(~currentFloorID~0 < 0); 6803107#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 6803104#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 6803101#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 6803099#$Ultimate##5020 assume ~currentFloorID~0 < 2; 6803097#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6803095#L656-36 assume !(0 == isFloorCalling_~floorID#1); 6803093#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6803088#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 6802905#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6802903#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6802901#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6802899#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6802897#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6802895#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6802891#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6802889#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6802875#L2776-7 assume { :end_inline_continueInDirection } true; 6802873#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6802872#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6802871#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6802869#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6802867#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6802865#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6802863#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6802861#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6802860#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6802859#L198-2 assume !false; 6802857#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6802856#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6802855#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6802853#L206 assume 1 != cleanup_~tmp___0~0#1; 6802851#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6802849#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6802847#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6802843#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6802839#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6802828#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6802827#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6802826#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6802825#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6802824#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6802823#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6802822#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6802821#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6802819#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6802818#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6802817#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6802815#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6802814#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6802805#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6802801#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6802795#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6802793#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6802777#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6799687#L3063-3 assume !(1 == ~doorState~0); 6799685#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6799684#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6799683#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6799682#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6799681#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6799680#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6799679#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6799678#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6799676#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6799675#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6799673#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6799671#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6799666#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6799664#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6799663#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6799662#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6799660#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6799641#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6799639#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6799637#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6799635#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6799633#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6799631#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6799629#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6799627#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6799625#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6799623#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6798496#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6798497#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6798463#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6798464#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6806004#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6805997#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6805995#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6805994#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6805993#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6805992#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6805991#L2776-9 assume { :end_inline_continueInDirection } true; 6805989#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6805987#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6805985#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6805928#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6805894#L1708-1 assume !(0 != ~landingButtons_spc1_1~0); 6805788#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6805785#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6805783#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6805782#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6805781#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6805780#L198-2 assume !false; 6779443#L199 [2022-12-13 18:17:26,046 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:26,046 INFO L85 PathProgramCache]: Analyzing trace with hash 865289604, now seen corresponding path program 1 times [2022-12-13 18:17:26,046 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:26,046 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [603892952] [2022-12-13 18:17:26,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:26,046 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:26,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:26,110 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 18:17:26,110 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:26,110 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [603892952] [2022-12-13 18:17:26,110 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [603892952] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:26,111 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:26,111 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 18:17:26,111 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1981213386] [2022-12-13 18:17:26,111 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:26,111 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 18:17:26,111 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:26,111 INFO L85 PathProgramCache]: Analyzing trace with hash -436647756, now seen corresponding path program 2 times [2022-12-13 18:17:26,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:26,111 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1867157287] [2022-12-13 18:17:26,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:26,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:26,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:26,193 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-13 18:17:26,193 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:26,193 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1867157287] [2022-12-13 18:17:26,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1867157287] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:26,193 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:26,193 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:26,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193995163] [2022-12-13 18:17:26,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:26,194 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:26,194 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:26,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 18:17:26,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 18:17:26,194 INFO L87 Difference]: Start difference. First operand 69725 states and 117481 transitions. cyclomatic complexity: 47767 Second operand has 5 states, 5 states have (on average 22.2) internal successors, (111), 5 states have internal predecessors, (111), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:26,395 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:26,395 INFO L93 Difference]: Finished difference Result 68748 states and 115837 transitions. [2022-12-13 18:17:26,395 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 68748 states and 115837 transitions. [2022-12-13 18:17:26,598 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42302 [2022-12-13 18:17:26,746 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 68748 states to 68748 states and 115837 transitions. [2022-12-13 18:17:26,746 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 45400 [2022-12-13 18:17:26,772 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 45400 [2022-12-13 18:17:26,772 INFO L73 IsDeterministic]: Start isDeterministic. Operand 68748 states and 115837 transitions. [2022-12-13 18:17:26,772 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:26,772 INFO L218 hiAutomatonCegarLoop]: Abstraction has 68748 states and 115837 transitions. [2022-12-13 18:17:26,805 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68748 states and 115837 transitions. [2022-12-13 18:17:27,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68748 to 68748. [2022-12-13 18:17:27,218 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68748 states, 68748 states have (on average 1.68495083493338) internal successors, (115837), 68747 states have internal predecessors, (115837), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:27,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68748 states to 68748 states and 115837 transitions. [2022-12-13 18:17:27,315 INFO L240 hiAutomatonCegarLoop]: Abstraction has 68748 states and 115837 transitions. [2022-12-13 18:17:27,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 18:17:27,316 INFO L428 stractBuchiCegarLoop]: Abstraction has 68748 states and 115837 transitions. [2022-12-13 18:17:27,316 INFO L335 stractBuchiCegarLoop]: ======== Iteration 45 ============ [2022-12-13 18:17:27,316 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 68748 states and 115837 transitions. [2022-12-13 18:17:27,466 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42302 [2022-12-13 18:17:27,466 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:27,466 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:27,469 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:27,470 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:27,470 INFO L748 eck$LassoCheckResult]: Stem: 6901176#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 6901177#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 6903051#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6902241#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 6902242#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 6902565#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 6903958#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 6903959#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6901945#L493 assume !(0 == getOrigin_~person#1); 6901946#L497 assume !(1 == getOrigin_~person#1); 6902063#L501 assume !(2 == getOrigin_~person#1); 6902064#L505 assume !(3 == getOrigin_~person#1); 6901667#L509 assume !(4 == getOrigin_~person#1); 6901668#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6901197#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6901198#L932 assume !(0 == initPersonOnFloor_~floor#1); 6901776#L959 assume 1 == initPersonOnFloor_~floor#1; 6902936#L960 assume !(0 == initPersonOnFloor_~person#1); 6903873#L963 assume !(1 == initPersonOnFloor_~person#1); 6900667#L966 assume !(2 == initPersonOnFloor_~person#1); 6900668#L969 assume !(3 == initPersonOnFloor_~person#1); 6901151#L972 assume !(4 == initPersonOnFloor_~person#1); 6903881#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 6903835#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6903836#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6904005#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 6904235#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6903514#L724 assume !(0 == callOnFloor_~floorID#1); 6901947#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 6901948#L736-2 assume { :end_inline_callOnFloor } true; 6903220#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 6901884#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 6901526#L493-1 assume !(0 == getOrigin_~person#1); 6901527#L497-1 assume !(1 == getOrigin_~person#1); 6904169#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 6901796#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 6901797#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 6902306#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 6903972#L986-1 assume 2 == initPersonOnFloor_~floor#1; 6903803#L987-2 assume !(0 == initPersonOnFloor_~person#1); 6901745#L990-2 assume !(1 == initPersonOnFloor_~person#1); 6901746#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 6902762#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 6903149#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 6903150#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 6904187#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 6903798#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 6903687#L724-2 assume !(0 == callOnFloor_~floorID#1); 6900937#L727-2 assume !(1 == callOnFloor_~floorID#1); 6900938#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 6904341#L736-5 assume { :end_inline_callOnFloor } true; 6903226#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 6902668#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6902669#L656 assume !(0 == isFloorCalling_~floorID#1); 6902197#L660 assume !(1 == isFloorCalling_~floorID#1); 6902198#L664 assume !(2 == isFloorCalling_~floorID#1); 6903071#L668 assume !(3 == isFloorCalling_~floorID#1); 6903072#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6900891#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6900892#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6902930#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6902931#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6902379#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6902380#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 6902409#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 6900770#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 6901141#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6901142#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6901429#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6901430#L2972 assume !(0 != timeShift_~tmp___9~2#1); 6902261#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 6902262#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6903764#L656-3 assume !(0 == isFloorCalling_~floorID#1); 6903765#L660-3 assume !(1 == isFloorCalling_~floorID#1); 6904216#L664-3 assume !(2 == isFloorCalling_~floorID#1); 6903638#L668-3 assume !(3 == isFloorCalling_~floorID#1); 6903639#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6901816#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6901817#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6900966#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6900967#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6903659#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6902208#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6902209#L2365 assume !(~currentFloorID~0 < 0); 6900824#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 6900825#$Ultimate##2342 assume ~currentFloorID~0 < 1; 6902360#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6902361#L656-5 assume !(0 == isFloorCalling_~floorID#1); 6903605#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6903606#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 6904117#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6902570#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6904485#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6904484#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6903673#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6902489#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6902490#L2764 assume !(0 != continueInDirection_~tmp~22#1); 6902004#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6902005#L2776-1 assume { :end_inline_continueInDirection } true; 6904495#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6904494#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6901318#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6901319#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6901975#L1708 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6901976#areDoorsOpen_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6901571#L1712 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6901572#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6915639#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6903075#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6903076#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6904304#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 6904305#L198-2 assume !false; 6915955#L199 [2022-12-13 18:17:27,470 INFO L750 eck$LassoCheckResult]: Loop: 6915955#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6966206#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6966205#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6966203#L206 assume 1 != cleanup_~tmp___0~0#1; 6966201#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6966199#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6965956#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6965947#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6965914#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6965902#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6965900#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6965898#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6965896#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6965894#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6965892#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6965890#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6965888#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6965886#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6965884#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6965882#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6965877#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6964980#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6964974#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6964959#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6964954#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6964947#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6962698#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6962695#L3063-3 assume !(1 == ~doorState~0); 6962693#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6962692#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6962683#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6962682#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6962679#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6962680#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6963694#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6963692#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6963690#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6963688#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6963686#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6961488#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 6961487#L2365-2 assume !(~currentFloorID~0 < 0); 6961485#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 6961480#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 6961481#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 6961476#$Ultimate##5020 assume ~currentFloorID~0 < 2; 6961477#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6961472#L656-36 assume !(0 == isFloorCalling_~floorID#1); 6961473#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6963530#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 6957772#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6957773#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6957763#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6957764#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6957755#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6957756#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6903722#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 6903668#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6903669#L2776-7 assume { :end_inline_continueInDirection } true; 6902096#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6902777#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6902617#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6902618#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 6904364#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6969391#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6969390#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6969389#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6969388#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6969387#L198-2 assume !false; 6969386#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 6902168#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 6902169#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 6902394#L206 assume 1 != cleanup_~tmp___0~0#1; 6902395#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6901870#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6901871#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 6903281#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 6904437#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 6969227#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 6969221#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 6969219#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6969218#L656-30 assume !(0 == isFloorCalling_~floorID#1); 6969217#L660-30 assume !(1 == isFloorCalling_~floorID#1); 6969216#L664-30 assume !(2 == isFloorCalling_~floorID#1); 6969215#L668-30 assume !(3 == isFloorCalling_~floorID#1); 6969214#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6969213#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6969212#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 6969211#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6969209#L656-32 assume !(0 == isFloorCalling_~floorID#1); 6969208#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6969203#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 6969194#L2793-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 6969193#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 6968562#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 6904067#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 6901682#L3063-3 assume !(1 == ~doorState~0); 6901683#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6903645#L656-33 assume !(0 == isFloorCalling_~floorID#1); 6903717#L660-33 assume !(1 == isFloorCalling_~floorID#1); 6902415#L664-33 assume !(2 == isFloorCalling_~floorID#1); 6902416#L668-33 assume !(3 == isFloorCalling_~floorID#1); 6903516#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6903517#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6900997#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6900998#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6901780#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6901781#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6902256#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6902257#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6968556#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 6968554#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6968552#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6968530#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 6968526#L656-44 assume !(0 == isFloorCalling_~floorID#1); 6968520#L660-44 assume !(1 == isFloorCalling_~floorID#1); 6968518#L664-44 assume !(2 == isFloorCalling_~floorID#1); 6968516#L668-44 assume !(3 == isFloorCalling_~floorID#1); 6968514#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 6968512#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 6968510#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 6968509#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 6968508#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6968506#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 6968503#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 6903817#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 6903818#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 6968493#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 6968488#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 6968486#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 6968482#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 6968481#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 6930405#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 6930406#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 6966229#L2776-9 assume { :end_inline_continueInDirection } true; 6966224#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 6966222#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 6966221#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 6966220#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 6966219#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 6937090#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 6966218#L1712-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 6966217#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 6966212#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 6966210#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 6966209#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 6966208#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 6966207#L198-2 assume !false; 6915955#L199 [2022-12-13 18:17:27,470 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:27,470 INFO L85 PathProgramCache]: Analyzing trace with hash -285536497, now seen corresponding path program 1 times [2022-12-13 18:17:27,470 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:27,471 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1305404218] [2022-12-13 18:17:27,471 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:27,471 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:27,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:27,482 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 18:17:27,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:27,517 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 18:17:27,517 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:27,517 INFO L85 PathProgramCache]: Analyzing trace with hash 659581775, now seen corresponding path program 1 times [2022-12-13 18:17:27,517 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:27,517 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1325822025] [2022-12-13 18:17:27,517 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:27,518 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:27,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:27,597 INFO L134 CoverageAnalysis]: Checked inductivity of 53 backedges. 27 proven. 0 refuted. 0 times theorem prover too weak. 26 trivial. 0 not checked. [2022-12-13 18:17:27,597 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:27,597 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1325822025] [2022-12-13 18:17:27,597 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1325822025] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:27,597 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:27,597 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:27,598 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [238847766] [2022-12-13 18:17:27,598 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:27,598 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:27,598 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:27,598 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:17:27,598 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:17:27,598 INFO L87 Difference]: Start difference. First operand 68748 states and 115837 transitions. cyclomatic complexity: 47100 Second operand has 6 states, 6 states have (on average 20.666666666666668) internal successors, (124), 6 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:28,313 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:28,313 INFO L93 Difference]: Finished difference Result 241023 states and 414028 transitions. [2022-12-13 18:17:28,313 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 241023 states and 414028 transitions. [2022-12-13 18:17:29,103 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 152592 [2022-12-13 18:17:29,676 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 241023 states to 241023 states and 414028 transitions. [2022-12-13 18:17:29,676 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 158399 [2022-12-13 18:17:29,778 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 158399 [2022-12-13 18:17:29,778 INFO L73 IsDeterministic]: Start isDeterministic. Operand 241023 states and 414028 transitions. [2022-12-13 18:17:29,779 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:29,779 INFO L218 hiAutomatonCegarLoop]: Abstraction has 241023 states and 414028 transitions. [2022-12-13 18:17:29,912 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 241023 states and 414028 transitions. [2022-12-13 18:17:30,760 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 241023 to 68943. [2022-12-13 18:17:30,804 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68943 states, 68943 states have (on average 1.6830135039090264) internal successors, (116032), 68942 states have internal predecessors, (116032), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:30,908 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68943 states to 68943 states and 116032 transitions. [2022-12-13 18:17:30,908 INFO L240 hiAutomatonCegarLoop]: Abstraction has 68943 states and 116032 transitions. [2022-12-13 18:17:30,908 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 18:17:30,909 INFO L428 stractBuchiCegarLoop]: Abstraction has 68943 states and 116032 transitions. [2022-12-13 18:17:30,909 INFO L335 stractBuchiCegarLoop]: ======== Iteration 46 ============ [2022-12-13 18:17:30,909 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 68943 states and 116032 transitions. [2022-12-13 18:17:31,054 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42428 [2022-12-13 18:17:31,054 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:31,054 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:31,058 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:31,058 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:31,058 INFO L748 eck$LassoCheckResult]: Stem: 7210974#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 7210975#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 7212839#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7212032#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 7212033#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 7212354#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 7213743#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7213744#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 7211739#L493 assume !(0 == getOrigin_~person#1); 7211740#L497 assume !(1 == getOrigin_~person#1); 7211854#L501 assume !(2 == getOrigin_~person#1); 7211855#L505 assume !(3 == getOrigin_~person#1); 7211465#L509 assume !(4 == getOrigin_~person#1); 7211466#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 7210995#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7210996#L932 assume !(0 == initPersonOnFloor_~floor#1); 7211572#L959 assume 1 == initPersonOnFloor_~floor#1; 7212727#L960 assume !(0 == initPersonOnFloor_~person#1); 7213657#L963 assume !(1 == initPersonOnFloor_~person#1); 7210463#L966 assume !(2 == initPersonOnFloor_~person#1); 7210464#L969 assume !(3 == initPersonOnFloor_~person#1); 7210948#L972 assume !(4 == initPersonOnFloor_~person#1); 7213666#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 7213612#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7213613#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7213786#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 7214000#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7213304#L724 assume !(0 == callOnFloor_~floorID#1); 7211741#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 7211742#L736-2 assume { :end_inline_callOnFloor } true; 7213014#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 7211678#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 7211324#L493-1 assume !(0 == getOrigin_~person#1); 7211325#L497-1 assume !(1 == getOrigin_~person#1); 7213946#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 7211592#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7211593#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 7212095#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 7213757#L986-1 assume 2 == initPersonOnFloor_~floor#1; 7213584#L987-2 assume !(0 == initPersonOnFloor_~person#1); 7211541#L990-2 assume !(1 == initPersonOnFloor_~person#1); 7211542#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 7212553#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7212937#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7212938#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 7213960#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 7213579#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7213473#L724-2 assume !(0 == callOnFloor_~floorID#1); 7210733#L727-2 assume !(1 == callOnFloor_~floorID#1); 7210734#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 7214089#L736-5 assume { :end_inline_callOnFloor } true; 7213020#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 7212460#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7212461#L656 assume !(0 == isFloorCalling_~floorID#1); 7211986#L660 assume !(1 == isFloorCalling_~floorID#1); 7211987#L664 assume !(2 == isFloorCalling_~floorID#1); 7212859#L668 assume !(3 == isFloorCalling_~floorID#1); 7212860#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7210687#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7210688#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7212721#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7212722#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7212166#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7212167#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7212196#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7210566#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7210937#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7210939#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7214203#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7214202#L2972 assume !(0 != timeShift_~tmp___9~2#1); 7212052#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 7212053#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7213545#L656-3 assume !(0 == isFloorCalling_~floorID#1); 7213546#L660-3 assume !(1 == isFloorCalling_~floorID#1); 7213982#L664-3 assume !(2 == isFloorCalling_~floorID#1); 7213424#L668-3 assume !(3 == isFloorCalling_~floorID#1); 7213425#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7211612#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7211613#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7210762#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7210763#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7213446#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7211999#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 7212000#L2365 assume !(~currentFloorID~0 < 0); 7210620#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 7210621#$Ultimate##2342 assume ~currentFloorID~0 < 1; 7212147#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7212148#L656-5 assume !(0 == isFloorCalling_~floorID#1); 7213389#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7213390#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 7213903#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7212359#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7214205#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7214204#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7213459#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7212277#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7212278#L2764 assume !(0 != continueInDirection_~tmp~22#1); 7211795#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7211796#L2776-1 assume { :end_inline_continueInDirection } true; 7214209#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7214208#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7211115#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7211116#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7211769#L1708 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 7211770#areDoorsOpen_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 7211368#L1712 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7211369#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7218517#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7218516#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7218515#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7214054#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7214055#L198-2 assume !false; 7224576#L199 [2022-12-13 18:17:31,059 INFO L750 eck$LassoCheckResult]: Loop: 7224576#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7236182#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7236177#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7236178#L206 assume 1 != cleanup_~tmp___0~0#1; 7236168#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7236169#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7236148#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 7236149#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 7236116#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7236103#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 7236100#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7236099#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7236092#L656-30 assume !(0 == isFloorCalling_~floorID#1); 7236089#L660-30 assume !(1 == isFloorCalling_~floorID#1); 7236086#L664-30 assume !(2 == isFloorCalling_~floorID#1); 7236083#L668-30 assume !(3 == isFloorCalling_~floorID#1); 7236080#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7236077#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7236076#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7236075#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7236073#L656-32 assume !(0 == isFloorCalling_~floorID#1); 7236072#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7236066#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7236067#L2793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7238650#L2168-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7238636#buttonForFloorIsPressed_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7238637#L2800-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7238537#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7238538#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7236041#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 7236042#L3063-3 assume !(1 == ~doorState~0); 7244168#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7244167#L656-33 assume !(0 == isFloorCalling_~floorID#1); 7244166#L660-33 assume !(1 == isFloorCalling_~floorID#1); 7244165#L664-33 assume !(2 == isFloorCalling_~floorID#1); 7244164#L668-33 assume !(3 == isFloorCalling_~floorID#1); 7244163#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7244162#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7244161#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7244160#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7244159#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7244156#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7244155#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 7244144#L2365-2 assume !(~currentFloorID~0 < 0); 7244141#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 7244137#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 7244134#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 7244131#$Ultimate##5020 assume ~currentFloorID~0 < 2; 7244127#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7244124#L656-36 assume !(0 == isFloorCalling_~floorID#1); 7244054#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7244049#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 7244017#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7244015#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7244013#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7244009#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7244004#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7244005#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7213508#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 7213454#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7213455#L2776-7 assume { :end_inline_continueInDirection } true; 7275091#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7275092#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7275085#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7275086#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 7275079#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7275080#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7275073#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7275074#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7275067#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7275068#L198-2 assume !false; 7275061#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7275062#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7275055#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7275056#L206 assume 1 != cleanup_~tmp___0~0#1; 7275010#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7275011#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7275139#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 7275128#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 7275122#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7275111#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 7275110#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7275109#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7275108#L656-30 assume !(0 == isFloorCalling_~floorID#1); 7275107#L660-30 assume !(1 == isFloorCalling_~floorID#1); 7275106#L664-30 assume !(2 == isFloorCalling_~floorID#1); 7275105#L668-30 assume !(3 == isFloorCalling_~floorID#1); 7275104#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7275103#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7275102#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7275101#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7210702#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7210703#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7241151#L2793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7241152#L2168-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7241133#buttonForFloorIsPressed_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7241134#L2800-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7241124#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7241125#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7241117#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 7241114#L3063-3 assume !(1 == ~doorState~0); 7241112#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7241111#L656-33 assume !(0 == isFloorCalling_~floorID#1); 7241110#L660-33 assume !(1 == isFloorCalling_~floorID#1); 7241109#L664-33 assume !(2 == isFloorCalling_~floorID#1); 7241108#L668-33 assume !(3 == isFloorCalling_~floorID#1); 7241107#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7241106#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7241105#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7241104#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7241103#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7241102#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7241101#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7241100#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7241099#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7241098#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 7241097#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 7241096#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7241095#L656-44 assume !(0 == isFloorCalling_~floorID#1); 7241094#L660-44 assume !(1 == isFloorCalling_~floorID#1); 7241093#L664-44 assume !(2 == isFloorCalling_~floorID#1); 7241092#L668-44 assume !(3 == isFloorCalling_~floorID#1); 7241091#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7241090#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7241089#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7241088#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7241087#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7241086#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7241085#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7241084#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7241083#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 7241082#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 7241081#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 7241080#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7241079#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7241078#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7238479#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 7238481#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7236246#L2776-9 assume { :end_inline_continueInDirection } true; 7236247#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7236238#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7236239#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7236233#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7236234#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 7236224#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 7236225#L1712-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7236203#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7236204#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7236193#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7236194#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7236185#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7236186#L198-2 assume !false; 7224576#L199 [2022-12-13 18:17:31,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:31,059 INFO L85 PathProgramCache]: Analyzing trace with hash -285536497, now seen corresponding path program 2 times [2022-12-13 18:17:31,059 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:31,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1781684977] [2022-12-13 18:17:31,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:31,059 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:31,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:31,071 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 18:17:31,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:31,099 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 18:17:31,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:31,099 INFO L85 PathProgramCache]: Analyzing trace with hash -1235210492, now seen corresponding path program 1 times [2022-12-13 18:17:31,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:31,099 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1024174201] [2022-12-13 18:17:31,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:31,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:31,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:31,181 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 24 proven. 0 refuted. 0 times theorem prover too weak. 31 trivial. 0 not checked. [2022-12-13 18:17:31,181 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:31,181 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1024174201] [2022-12-13 18:17:31,182 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1024174201] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:31,182 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:31,182 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 18:17:31,182 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288754256] [2022-12-13 18:17:31,182 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:31,182 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:31,182 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:31,182 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 18:17:31,183 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 18:17:31,183 INFO L87 Difference]: Start difference. First operand 68943 states and 116032 transitions. cyclomatic complexity: 47100 Second operand has 6 states, 6 states have (on average 20.666666666666668) internal successors, (124), 6 states have internal predecessors, (124), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:32,946 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:32,946 INFO L93 Difference]: Finished difference Result 254060 states and 431192 transitions. [2022-12-13 18:17:32,946 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 254060 states and 431192 transitions. [2022-12-13 18:17:33,859 INFO L131 ngComponentsAnalysis]: Automaton has 10 accepting balls. 159120 [2022-12-13 18:17:34,462 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 254060 states to 254060 states and 431192 transitions. [2022-12-13 18:17:34,462 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 167348 [2022-12-13 18:17:34,580 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 167348 [2022-12-13 18:17:34,580 INFO L73 IsDeterministic]: Start isDeterministic. Operand 254060 states and 431192 transitions. [2022-12-13 18:17:34,580 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:34,580 INFO L218 hiAutomatonCegarLoop]: Abstraction has 254060 states and 431192 transitions. [2022-12-13 18:17:34,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 254060 states and 431192 transitions. [2022-12-13 18:17:35,693 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 254060 to 68943. [2022-12-13 18:17:35,744 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68943 states, 68943 states have (on average 1.6820852008180671) internal successors, (115968), 68942 states have internal predecessors, (115968), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:35,874 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 68943 states to 68943 states and 115968 transitions. [2022-12-13 18:17:35,874 INFO L240 hiAutomatonCegarLoop]: Abstraction has 68943 states and 115968 transitions. [2022-12-13 18:17:35,874 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-12-13 18:17:35,875 INFO L428 stractBuchiCegarLoop]: Abstraction has 68943 states and 115968 transitions. [2022-12-13 18:17:35,875 INFO L335 stractBuchiCegarLoop]: ======== Iteration 47 ============ [2022-12-13 18:17:35,875 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 68943 states and 115968 transitions. [2022-12-13 18:17:36,019 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 42428 [2022-12-13 18:17:36,019 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 18:17:36,019 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 18:17:36,023 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:36,023 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 18:17:36,023 INFO L748 eck$LassoCheckResult]: Stem: 7534019#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 7534020#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 7535908#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7535084#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~3#1;havoc valid_product_~retValue_acc~3#1;valid_product_~retValue_acc~3#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~3#1; 7535085#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 7535413#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 7536843#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 7536844#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 7534786#L493 assume !(0 == getOrigin_~person#1); 7534787#L497 assume !(1 == getOrigin_~person#1); 7534902#L501 assume !(2 == getOrigin_~person#1); 7534903#L505 assume !(3 == getOrigin_~person#1); 7534512#L509 assume !(4 == getOrigin_~person#1); 7534513#L513 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 7534044#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7534045#L932 assume !(0 == initPersonOnFloor_~floor#1); 7534620#L959 assume 1 == initPersonOnFloor_~floor#1; 7535796#L960 assume !(0 == initPersonOnFloor_~person#1); 7536753#L963 assume !(1 == initPersonOnFloor_~person#1); 7533508#L966 assume !(2 == initPersonOnFloor_~person#1); 7533509#L969 assume !(3 == initPersonOnFloor_~person#1); 7533994#L972 assume !(4 == initPersonOnFloor_~person#1); 7536761#L975 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 7536709#L1040-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7536710#L1654 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7536891#L1657 assume 1 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_1~0 := 1; 7537136#L1666-2 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7536383#L724 assume !(0 == callOnFloor_~floorID#1); 7534788#L727 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 7534789#L736-2 assume { :end_inline_callOnFloor } true; 7536090#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 7534725#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret7#1, angelinaCall_~tmp~2#1;havoc angelinaCall_~tmp~2#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~5#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~5#1; 7534370#L493-1 assume !(0 == getOrigin_~person#1); 7534371#L497-1 assume !(1 == getOrigin_~person#1); 7537073#L501-1 assume 2 == getOrigin_~person#1;getOrigin_~retValue_acc~5#1 := 2;getOrigin_#res#1 := getOrigin_~retValue_acc~5#1; 7534645#getOrigin_returnLabel#2 angelinaCall_#t~ret7#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~2#1 := angelinaCall_#t~ret7#1;havoc angelinaCall_#t~ret7#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~2#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7534646#L932-1 assume !(0 == initPersonOnFloor_~floor#1); 7535147#L959-1 assume !(1 == initPersonOnFloor_~floor#1); 7536856#L986-1 assume 2 == initPersonOnFloor_~floor#1; 7536680#L987-2 assume !(0 == initPersonOnFloor_~person#1); 7534590#L990-2 assume !(1 == initPersonOnFloor_~person#1); 7534591#L993-2 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_2~0 := 1; 7535620#L1040-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 7536010#L1654-2 assume !(0 == __utac_acc__Specification1_spec__2_~floor#1); 7536011#L1657-2 assume !(1 == __utac_acc__Specification1_spec__2_~floor#1); 7537090#L1660-2 assume 2 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_2~0 := 1; 7536674#L1666-5 assume { :end_inline___utac_acc__Specification1_spec__2 } true; 7536568#L724-2 assume !(0 == callOnFloor_~floorID#1); 7533782#L727-2 assume !(1 == callOnFloor_~floorID#1); 7533783#L730-2 assume 2 == callOnFloor_~floorID#1;~calls_2~0 := 1; 7537245#L736-5 assume { :end_inline_callOnFloor } true; 7536094#initPersonOnFloor_returnLabel#2 assume { :end_inline_initPersonOnFloor } true; 7535520#angelinaCall_returnLabel#1 assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7535521#L656 assume !(0 == isFloorCalling_~floorID#1); 7535039#L660 assume !(1 == isFloorCalling_~floorID#1); 7535040#L664 assume !(2 == isFloorCalling_~floorID#1); 7535929#L668 assume !(3 == isFloorCalling_~floorID#1); 7535930#L672 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7533732#isFloorCalling_returnLabel#1 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7533733#isExecutiveFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7535794#L2820 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7535795#L656-2 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7535223#isFloorCalling_returnLabel#3 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7535224#L2793-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7535252#L2168-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7533611#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7533987#L2800-1 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7533989#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7537431#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7537430#L2972 assume !(0 != timeShift_~tmp___9~2#1); 7535107#L3063 assume 1 == ~doorState~0;~doorState~0 := 0; 7535108#L3063-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7536639#L656-3 assume !(0 == isFloorCalling_~floorID#1); 7536640#L660-3 assume !(1 == isFloorCalling_~floorID#1); 7537114#L664-3 assume !(2 == isFloorCalling_~floorID#1); 7536516#L668-3 assume !(3 == isFloorCalling_~floorID#1); 7536517#L672-3 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7534661#isFloorCalling_returnLabel#4 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7534662#isExecutiveFloorCalling_returnLabel#2 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7533807#L2703 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7533808#L2355 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7536539#isTopFloor_returnLabel#1 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7535049#L2359 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 7535050#L2365 assume !(~currentFloorID~0 < 0); 7533673#$Ultimate##2336 assume !(~currentFloorID~0 < 0); 7533674#$Ultimate##2342 assume ~currentFloorID~0 < 1; 7535204#L2395 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7535205#L656-5 assume !(0 == isFloorCalling_~floorID#1); 7536479#L660-5 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7536480#isFloorCalling_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret65#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___3~2#1 := stopRequestedInDirection__wrappee__empty_#t~ret65#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret65#1; 7537023#L2399 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7535418#stopRequestedInDirection__wrappee__empty_returnLabel#1 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7537433#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7537432#L3071 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7536553#L2760 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7535334#isTopFloor_returnLabel#2 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7535335#L2764 assume !(0 != continueInDirection_~tmp~22#1); 7534843#L2770-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7534844#L2776-1 assume { :end_inline_continueInDirection } true; 7537448#L3080-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7537447#getCurrentFloorID_returnLabel#4 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7534158#L1692 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7534159#$Ultimate##2835 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7537227#L1708 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 7537342#areDoorsOpen_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 7537343#L1712 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7533527#$Ultimate##2844 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7533528#$Ultimate##2853 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7535933#$Ultimate##2862 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7535934#L1752 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7537204#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 7537205#L198-2 assume !false; 7549245#L199 [2022-12-13 18:17:36,024 INFO L750 eck$LassoCheckResult]: Loop: 7549245#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7572428#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7572425#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7572422#L206 assume 1 != cleanup_~tmp___0~0#1; 7572381#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7572376#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7572370#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 7572359#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 7572353#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7572341#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 7572336#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7572289#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7572282#L656-30 assume !(0 == isFloorCalling_~floorID#1); 7572269#L660-30 assume !(1 == isFloorCalling_~floorID#1); 7572267#L664-30 assume !(2 == isFloorCalling_~floorID#1); 7572265#L668-30 assume !(3 == isFloorCalling_~floorID#1); 7572263#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7572261#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7572259#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7572258#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7572256#L656-32 assume !(0 == isFloorCalling_~floorID#1); 7572257#L660-32 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7592296#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7599078#L2793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7571340#L2168-3 assume !(0 == buttonForFloorIsPressed_~floorID#1); 7571339#L2172-3 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7568316#buttonForFloorIsPressed_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7568317#L2800-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7568309#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7568310#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7568302#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 7568303#L3063-3 assume !(1 == ~doorState~0); 7568296#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7568297#L656-33 assume !(0 == isFloorCalling_~floorID#1); 7568282#L660-33 assume !(1 == isFloorCalling_~floorID#1); 7568283#L664-33 assume !(2 == isFloorCalling_~floorID#1); 7568276#L668-33 assume !(3 == isFloorCalling_~floorID#1); 7568277#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7568270#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7568271#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7568264#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7568265#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7568258#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7568259#L2359-2 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1); 7568252#L2365-2 assume !(~currentFloorID~0 < 0); 7568253#$Ultimate##4992 assume !(~currentFloorID~0 < 0); 7568247#$Ultimate##4998 assume !(~currentFloorID~0 < 1); 7568248#$Ultimate##5014 assume !(~currentFloorID~0 < 1); 7568229#$Ultimate##5020 assume ~currentFloorID~0 < 2; 7568230#L2424-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7571316#L656-36 assume !(0 == isFloorCalling_~floorID#1); 7571315#L660-36 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7571313#isFloorCalling_returnLabel#37 stopRequestedInDirection__wrappee__empty_#t~ret66#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection__wrappee__empty_~tmp___2~3#1 := stopRequestedInDirection__wrappee__empty_#t~ret66#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret66#1; 7567936#L2428-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 1;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7567937#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7567931#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7567932#L3071-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7567923#L2760-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7567924#isTopFloor_returnLabel#7 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7567918#L2764-9 assume 0 != continueInDirection_~tmp~22#1;~currentHeading~0 := 0; 7567919#L2770-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7537155#L2776-7 assume { :end_inline_continueInDirection } true; 7534935#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7602328#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7602275#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7602274#$Ultimate##5491 assume !(1 == __utac_acc__Specification1_spec__3_~floor~0#1); 7602273#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7602272#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7602271#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7602260#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7602237#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7602230#L198-2 assume !false; 7602228#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7602226#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 7602224#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7600250#L206 assume 1 != cleanup_~tmp___0~0#1; 7599293#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7599294#L656-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7602207#isFloorCalling_returnLabel#26 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 7602196#L2259 assume !(0 != anyStopRequested_~tmp___3~1#1); 7602190#L2263 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 7602179#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 7602178#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 7602177#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_#t~ret100#1, timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_~tmp~26#1, timeShift_~tmp___0~11#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~26#1;havoc timeShift_~tmp___0~11#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1, stopRequestedAtCurrentFloor_#t~ret81#1, stopRequestedAtCurrentFloor_#t~ret82#1, stopRequestedAtCurrentFloor_#t~ret83#1, stopRequestedAtCurrentFloor_~retValue_acc~25#1, stopRequestedAtCurrentFloor_~tmp~24#1, stopRequestedAtCurrentFloor_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~25#1;havoc stopRequestedAtCurrentFloor_~tmp~24#1;havoc stopRequestedAtCurrentFloor_~tmp___0~9#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7602176#L656-30 assume !(0 == isFloorCalling_~floorID#1); 7602175#L660-30 assume !(1 == isFloorCalling_~floorID#1); 7602174#L664-30 assume !(2 == isFloorCalling_~floorID#1); 7602173#L668-30 assume !(3 == isFloorCalling_~floorID#1); 7602172#L672-30 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7602171#isFloorCalling_returnLabel#31 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7602170#isExecutiveFloorCalling_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret80#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~24#1 := stopRequestedAtCurrentFloor_#t~ret80#1;havoc stopRequestedAtCurrentFloor_#t~ret80#1; 7602169#L2820-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~24#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7602167#L656-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7602166#isFloorCalling_returnLabel#33 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret78#1; 7599320#L2793-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 7599321#L2168-3 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 7534886#buttonForFloorIsPressed_returnLabel#4 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret79#1; 7535809#L2800-3 assume !(0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp~23#1);stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1 := 0;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24#1; 7536013#stopRequestedAtCurrentFloor__wrappee__empty_returnLabel#4 stopRequestedAtCurrentFloor_#t~ret83#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~25#1 := stopRequestedAtCurrentFloor_#t~ret83#1;havoc stopRequestedAtCurrentFloor_#t~ret83#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~25#1; 7602282#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret96#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 7602262#L2972-2 assume !(0 != timeShift_~tmp___9~2#1); 7534526#L3063-3 assume !(1 == ~doorState~0); 7534527#L3063-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7534865#L656-33 assume !(0 == isFloorCalling_~floorID#1); 7534866#L660-33 assume !(1 == isFloorCalling_~floorID#1); 7535255#L664-33 assume !(2 == isFloorCalling_~floorID#1); 7535256#L668-33 assume !(3 == isFloorCalling_~floorID#1); 7536385#L672-33 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7536386#isFloorCalling_returnLabel#34 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7533838#isExecutiveFloorCalling_returnLabel#5 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7533839#L2703-2 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7534624#L2355-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7534625#isTopFloor_returnLabel#6 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7535095#L2359-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7535096#stopRequestedInDirection__wrappee__empty_returnLabel#3 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7535395#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret103#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret103#1;havoc timeShift_#t~ret103#1; 7536327#L3071-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 7536498#L2846-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 7537121#getReverseHeading_returnLabel#3 timeShift_#t~ret104#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret104#1;havoc timeShift_#t~ret104#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret74#1, stopRequestedInDirection_#t~ret75#1, stopRequestedInDirection_#t~ret76#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~22#1, stopRequestedInDirection_~tmp~21#1, stopRequestedInDirection_~tmp___0~7#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~22#1;havoc stopRequestedInDirection_~tmp~21#1;havoc stopRequestedInDirection_~tmp___0~7#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret133#1, isExecutiveFloorCalling_~retValue_acc~28#1;havoc isExecutiveFloorCalling_~retValue_acc~28#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 7536043#L656-44 assume !(0 == isFloorCalling_~floorID#1); 7536044#L660-44 assume !(1 == isFloorCalling_~floorID#1); 7534586#L664-44 assume !(2 == isFloorCalling_~floorID#1); 7534587#L668-44 assume !(3 == isFloorCalling_~floorID#1); 7536627#L672-44 assume 4 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_4~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 7536628#isFloorCalling_returnLabel#45 isExecutiveFloorCalling_#t~ret133#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~28#1 := isExecutiveFloorCalling_#t~ret133#1;havoc isExecutiveFloorCalling_#t~ret133#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~28#1; 7534302#isExecutiveFloorCalling_returnLabel#6 stopRequestedInDirection_#t~ret74#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~7#1 := stopRequestedInDirection_#t~ret74#1;havoc stopRequestedInDirection_#t~ret74#1; 7534303#L2703-3 assume !(0 != stopRequestedInDirection_~tmp___0~7#1);assume { :begin_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection__wrappee__empty_#in~dir#1, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1 := stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_#res#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1, stopRequestedInDirection__wrappee__empty_#t~ret64#1, stopRequestedInDirection__wrappee__empty_#t~ret65#1, stopRequestedInDirection__wrappee__empty_#t~ret66#1, stopRequestedInDirection__wrappee__empty_#t~ret67#1, stopRequestedInDirection__wrappee__empty_#t~ret68#1, stopRequestedInDirection__wrappee__empty_#t~ret69#1, stopRequestedInDirection__wrappee__empty_#t~ret70#1, stopRequestedInDirection__wrappee__empty_#t~ret71#1, stopRequestedInDirection__wrappee__empty_#t~ret72#1, stopRequestedInDirection__wrappee__empty_#t~ret73#1, stopRequestedInDirection__wrappee__empty_~dir#1, stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1, stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1, stopRequestedInDirection__wrappee__empty_~tmp~20#1, stopRequestedInDirection__wrappee__empty_~tmp___0~6#1, stopRequestedInDirection__wrappee__empty_~tmp___1~5#1, stopRequestedInDirection__wrappee__empty_~tmp___2~3#1, stopRequestedInDirection__wrappee__empty_~tmp___3~2#1, stopRequestedInDirection__wrappee__empty_~tmp___4~1#1, stopRequestedInDirection__wrappee__empty_~tmp___5~0#1, stopRequestedInDirection__wrappee__empty_~tmp___6~0#1, stopRequestedInDirection__wrappee__empty_~tmp___7~0#1, stopRequestedInDirection__wrappee__empty_~tmp___8~0#1, stopRequestedInDirection__wrappee__empty_~tmp___9~0#1;stopRequestedInDirection__wrappee__empty_~dir#1 := stopRequestedInDirection__wrappee__empty_#in~dir#1;stopRequestedInDirection__wrappee__empty_~respectFloorCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls#1;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls#1 := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls#1;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1;havoc stopRequestedInDirection__wrappee__empty_~tmp~20#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~6#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~0#1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~0#1; 7533741#L2355-3 assume 1 == stopRequestedInDirection__wrappee__empty_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7533742#isTopFloor_returnLabel#8 stopRequestedInDirection__wrappee__empty_#t~ret63#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection__wrappee__empty_~tmp~20#1 := stopRequestedInDirection__wrappee__empty_#t~ret63#1;havoc stopRequestedInDirection__wrappee__empty_#t~ret63#1; 7536252#L2359-3 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~20#1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1 := 0;stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~21#1; 7536794#stopRequestedInDirection__wrappee__empty_returnLabel#4 stopRequestedInDirection_#t~ret76#1 := stopRequestedInDirection__wrappee__empty_#res#1;assume { :end_inline_stopRequestedInDirection__wrappee__empty } true;stopRequestedInDirection_~retValue_acc~22#1 := stopRequestedInDirection_#t~ret76#1;havoc stopRequestedInDirection_#t~ret76#1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~22#1; 7586562#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret105#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret105#1;havoc timeShift_#t~ret105#1; 7586560#L3080-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~26#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~26#1; 7586558#L2846-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~26#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~26#1; 7586556#getReverseHeading_returnLabel#4 timeShift_#t~ret106#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret106#1;havoc timeShift_#t~ret106#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret77#1, continueInDirection_~dir#1, continueInDirection_~tmp~22#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~22#1;~currentHeading~0 := continueInDirection_~dir#1; 7586554#L2760-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 7586550#isTopFloor_returnLabel#9 continueInDirection_#t~ret77#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~22#1 := continueInDirection_#t~ret77#1;havoc continueInDirection_#t~ret77#1; 7561441#L2764-12 assume !(0 != continueInDirection_~tmp~22#1); 7561442#L2770-14 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 7585235#L2776-9 assume { :end_inline_continueInDirection } true; 7585231#L3080-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret42#1, __utac_acc__Specification1_spec__3_#t~ret43#1, __utac_acc__Specification1_spec__3_#t~ret44#1, __utac_acc__Specification1_spec__3_#t~ret45#1, __utac_acc__Specification1_spec__3_#t~ret46#1, __utac_acc__Specification1_spec__3_#t~ret47#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~12#1, __utac_acc__Specification1_spec__3_~tmp___0~2#1, __utac_acc__Specification1_spec__3_~tmp___1~1#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~12#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 7585229#getCurrentFloorID_returnLabel#8 __utac_acc__Specification1_spec__3_#t~ret42#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~12#1 := __utac_acc__Specification1_spec__3_#t~ret42#1;havoc __utac_acc__Specification1_spec__3_#t~ret42#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~12#1; 7585227#L1692-1 assume !(0 == __utac_acc__Specification1_spec__3_~floor~0#1); 7585215#$Ultimate##5491 assume 1 == __utac_acc__Specification1_spec__3_~floor~0#1; 7572529#L1708-1 assume 0 != ~landingButtons_spc1_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 7572526#areDoorsOpen_returnLabel#7 __utac_acc__Specification1_spec__3_#t~ret44#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___3~0#1 := __utac_acc__Specification1_spec__3_#t~ret44#1;havoc __utac_acc__Specification1_spec__3_#t~ret44#1; 7572523#L1712-2 assume !(0 != __utac_acc__Specification1_spec__3_~tmp___3~0#1); 7572520#$Ultimate##5500 assume !(2 == __utac_acc__Specification1_spec__3_~floor~0#1); 7572517#$Ultimate##5509 assume !(3 == __utac_acc__Specification1_spec__3_~floor~0#1); 7572478#$Ultimate##5518 assume !(4 == __utac_acc__Specification1_spec__3_~floor~0#1); 7572439#L1752-1 assume { :end_inline___utac_acc__Specification1_spec__3 } true; 7572436#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 7572433#L198-2 assume !false; 7549245#L199 [2022-12-13 18:17:36,024 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:36,024 INFO L85 PathProgramCache]: Analyzing trace with hash -285536497, now seen corresponding path program 3 times [2022-12-13 18:17:36,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:36,024 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [373065097] [2022-12-13 18:17:36,024 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:36,024 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:36,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:36,036 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 18:17:36,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 18:17:36,063 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 18:17:36,064 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 18:17:36,064 INFO L85 PathProgramCache]: Analyzing trace with hash 331977099, now seen corresponding path program 1 times [2022-12-13 18:17:36,064 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 18:17:36,064 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [833505226] [2022-12-13 18:17:36,064 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 18:17:36,064 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 18:17:36,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 18:17:36,100 INFO L134 CoverageAnalysis]: Checked inductivity of 55 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-12-13 18:17:36,100 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 18:17:36,100 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [833505226] [2022-12-13 18:17:36,100 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [833505226] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 18:17:36,100 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 18:17:36,100 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 18:17:36,100 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1967779515] [2022-12-13 18:17:36,100 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 18:17:36,100 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 18:17:36,100 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 18:17:36,101 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 18:17:36,101 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 18:17:36,101 INFO L87 Difference]: Start difference. First operand 68943 states and 115968 transitions. cyclomatic complexity: 47036 Second operand has 3 states, 3 states have (on average 47.333333333333336) internal successors, (142), 3 states have internal predecessors, (142), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 18:17:36,532 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 18:17:36,532 INFO L93 Difference]: Finished difference Result 100098 states and 169101 transitions. [2022-12-13 18:17:36,532 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100098 states and 169101 transitions. [2022-12-13 18:17:36,855 INFO L131 ngComponentsAnalysis]: Automaton has 8 accepting balls. 61594 [2022-12-13 18:17:37,938 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100098 states to 100098 states and 169101 transitions. [2022-12-13 18:17:37,939 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65115 [2022-12-13 18:17:37,977 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65115 [2022-12-13 18:17:37,977 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100098 states and 169101 transitions. [2022-12-13 18:17:37,977 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-12-13 18:17:37,978 INFO L218 hiAutomatonCegarLoop]: Abstraction has 100098 states and 169101 transitions. [2022-12-13 18:17:38,027 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100098 states and 169101 transitions. [2022-12-13 18:17:39,032 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100098 to 68531. [2022-12-13 18:17:39,078 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 68531 states, 68531 states have (on average 1.6771679969648772) internal successors, (114938), 68530 states have internal predecessors, (114938), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)