./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 2329fc70 Calling Ultimate with: /usr/lib/jvm/java-1.11.0-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8 --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4cb164e6307f0ddcae5850d7f4578967441d1456f6ed5a5be472ba090758b873 --- Real Ultimate output --- [0.001s][warning][os,container] Duplicate cpuset controllers detected. Picking /sys/fs/cgroup/cpuset, skipping /sys/fs/cgroup/cpuset. This is Ultimate 0.2.2-dev-2329fc7 [2022-12-13 12:38:00,655 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-12-13 12:38:00,657 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-12-13 12:38:00,670 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-12-13 12:38:00,671 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-12-13 12:38:00,671 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-12-13 12:38:00,672 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-12-13 12:38:00,673 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-12-13 12:38:00,674 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-12-13 12:38:00,674 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-12-13 12:38:00,675 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-12-13 12:38:00,676 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-12-13 12:38:00,676 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-12-13 12:38:00,677 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-12-13 12:38:00,677 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-12-13 12:38:00,678 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-12-13 12:38:00,679 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-12-13 12:38:00,679 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-12-13 12:38:00,680 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-12-13 12:38:00,681 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-12-13 12:38:00,682 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-12-13 12:38:00,683 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-12-13 12:38:00,684 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-12-13 12:38:00,684 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-12-13 12:38:00,686 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-12-13 12:38:00,687 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-12-13 12:38:00,687 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-12-13 12:38:00,687 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-12-13 12:38:00,688 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-12-13 12:38:00,688 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-12-13 12:38:00,689 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-12-13 12:38:00,689 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-12-13 12:38:00,690 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-12-13 12:38:00,690 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-12-13 12:38:00,691 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-12-13 12:38:00,691 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-12-13 12:38:00,691 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-12-13 12:38:00,691 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-12-13 12:38:00,692 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-12-13 12:38:00,692 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-12-13 12:38:00,693 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-12-13 12:38:00,693 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-12-13 12:38:00,708 INFO L113 SettingsManager]: Loading preferences was successful [2022-12-13 12:38:00,708 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-12-13 12:38:00,732 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-12-13 12:38:00,732 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-12-13 12:38:00,733 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-12-13 12:38:00,733 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-12-13 12:38:00,734 INFO L138 SettingsManager]: * Use SBE=true [2022-12-13 12:38:00,734 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-12-13 12:38:00,734 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-12-13 12:38:00,734 INFO L138 SettingsManager]: * Use old map elimination=false [2022-12-13 12:38:00,734 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-12-13 12:38:00,735 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-12-13 12:38:00,735 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-12-13 12:38:00,735 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-12-13 12:38:00,735 INFO L138 SettingsManager]: * sizeof long=4 [2022-12-13 12:38:00,735 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-12-13 12:38:00,735 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-12-13 12:38:00,736 INFO L138 SettingsManager]: * sizeof long double=12 [2022-12-13 12:38:00,737 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-12-13 12:38:00,737 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-12-13 12:38:00,737 INFO L138 SettingsManager]: * Use constant arrays=true [2022-12-13 12:38:00,737 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-12-13 12:38:00,737 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-12-13 12:38:00,737 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-12-13 12:38:00,738 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-12-13 12:38:00,738 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-12-13 12:38:00,739 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-12-13 12:38:00,739 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8 Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4cb164e6307f0ddcae5850d7f4578967441d1456f6ed5a5be472ba090758b873 [2022-12-13 12:38:00,931 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-12-13 12:38:00,950 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-12-13 12:38:00,953 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-12-13 12:38:00,954 INFO L271 PluginConnector]: Initializing CDTParser... [2022-12-13 12:38:00,955 INFO L275 PluginConnector]: CDTParser initialized [2022-12-13 12:38:00,956 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/../../sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c [2022-12-13 12:38:03,510 INFO L500 CDTParser]: Created temporary CDT project at NULL [2022-12-13 12:38:03,752 INFO L351 CDTParser]: Found 1 translation units. [2022-12-13 12:38:03,752 INFO L172 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c [2022-12-13 12:38:03,764 INFO L394 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/data/cd7ffb8d8/06c743113f5242438a48b5cb730069e0/FLAG1d72832ae [2022-12-13 12:38:04,081 INFO L402 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/data/cd7ffb8d8/06c743113f5242438a48b5cb730069e0 [2022-12-13 12:38:04,083 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-12-13 12:38:04,085 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-12-13 12:38:04,086 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-12-13 12:38:04,086 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-12-13 12:38:04,089 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-12-13 12:38:04,090 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,091 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3ee8c832 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04, skipping insertion in model container [2022-12-13 12:38:04,091 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,097 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-12-13 12:38:04,150 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-12-13 12:38:04,428 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c[28842,28855] [2022-12-13 12:38:04,551 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 12:38:04,564 INFO L203 MainTranslator]: Completed pre-run [2022-12-13 12:38:04,605 WARN L237 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/sv-benchmarks/c/product-lines/elevator_spec2_product09.cil.c[28842,28855] [2022-12-13 12:38:04,655 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-12-13 12:38:04,685 INFO L208 MainTranslator]: Completed translation [2022-12-13 12:38:04,685 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04 WrapperNode [2022-12-13 12:38:04,686 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-12-13 12:38:04,687 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-12-13 12:38:04,687 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-12-13 12:38:04,687 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-12-13 12:38:04,694 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,724 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,847 INFO L138 Inliner]: procedures = 89, calls = 330, calls flagged for inlining = 183, calls inlined = 252, statements flattened = 8075 [2022-12-13 12:38:04,847 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-12-13 12:38:04,848 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-12-13 12:38:04,848 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-12-13 12:38:04,848 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-12-13 12:38:04,855 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,856 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,867 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,868 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,939 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,972 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,979 INFO L185 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:04,988 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:05,002 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-12-13 12:38:05,003 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-12-13 12:38:05,003 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-12-13 12:38:05,004 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-12-13 12:38:05,004 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (1/1) ... [2022-12-13 12:38:05,010 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-12-13 12:38:05,020 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/z3 [2022-12-13 12:38:05,031 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-12-13 12:38:05,033 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_bc11ff1b-4ee8-4990-9206-762d61dce78b/bin/uautomizer-uyxdKDjOR8/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-12-13 12:38:05,064 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-12-13 12:38:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-12-13 12:38:05,065 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-12-13 12:38:05,065 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-12-13 12:38:05,172 INFO L235 CfgBuilder]: Building ICFG [2022-12-13 12:38:05,173 INFO L261 CfgBuilder]: Building CFG for each procedure with an implementation [2022-12-13 12:38:07,920 INFO L276 CfgBuilder]: Performing block encoding [2022-12-13 12:38:07,941 INFO L295 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-12-13 12:38:07,942 INFO L300 CfgBuilder]: Removed 1 assume(true) statements. [2022-12-13 12:38:07,946 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 12:38:07 BoogieIcfgContainer [2022-12-13 12:38:07,946 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-12-13 12:38:07,947 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-12-13 12:38:07,947 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-12-13 12:38:07,951 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-12-13 12:38:07,951 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 12:38:07,952 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.12 12:38:04" (1/3) ... [2022-12-13 12:38:07,952 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@544269fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 12:38:07, skipping insertion in model container [2022-12-13 12:38:07,953 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 12:38:07,953 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.12 12:38:04" (2/3) ... [2022-12-13 12:38:07,953 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@544269fb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.12 12:38:07, skipping insertion in model container [2022-12-13 12:38:07,953 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-12-13 12:38:07,953 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.12 12:38:07" (3/3) ... [2022-12-13 12:38:07,955 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product09.cil.c [2022-12-13 12:38:08,037 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2022-12-13 12:38:08,037 INFO L304 stractBuchiCegarLoop]: Hoare is false [2022-12-13 12:38:08,037 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-12-13 12:38:08,038 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-12-13 12:38:08,038 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-12-13 12:38:08,038 INFO L308 stractBuchiCegarLoop]: Difference is false [2022-12-13 12:38:08,038 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-12-13 12:38:08,038 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-12-13 12:38:08,050 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2387 states, 2386 states have (on average 1.8725901089689858) internal successors, (4468), 2386 states have internal predecessors, (4468), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:08,120 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2022-12-13 12:38:08,121 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:08,121 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:08,133 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:08,133 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:08,133 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-12-13 12:38:08,139 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2387 states, 2386 states have (on average 1.8725901089689858) internal successors, (4468), 2386 states have internal predecessors, (4468), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:08,168 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1177 [2022-12-13 12:38:08,169 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:08,169 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:08,172 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:08,172 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:08,178 INFO L748 eck$LassoCheckResult]: Stem: 161#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2297#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 938#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 545#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 686#valid_product_returnLabel#1true main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1870#L399true assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1590#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 107#__utac_acc__Specification2_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1362#L458true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 173#getOrigin_returnLabel#1true bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1066#L1076true assume 0 == initPersonOnFloor_~floor#1; 778#L1077true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 144#L1184-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2118#L868true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2083#L880-2true assume { :end_inline_callOnFloor } true; 1028#initPersonOnFloor_returnLabel#1true assume { :end_inline_initPersonOnFloor } true; 417#bigMacCall_returnLabel#1true assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1605#L805true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 87#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1521#L2265true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 254#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1909#L2413true assume !(0 != timeShift_~tmp___9~2#1); 1900#L2504true assume !(1 == ~doorState~0); 1912#L2504-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 446#L1856true assume !(1 == stopRequestedInDirection_~dir#1); 1660#L2025true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1704#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2087#L2512true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2383#L2232true assume !(1 == ~currentHeading~0); 1044#L2242true assume !(0 == ~currentFloorID~0); 753#L2242-2true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1498#L2248-1true assume { :end_inline_continueInDirection } true; 1427#L2521-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1113#getCurrentFloorID_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 290#L595true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2300#L596true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 729#areDoorsOpen_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 106#L600true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 620#L655true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2002#timeShift_returnLabel#1true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2338#L198-2true [2022-12-13 12:38:08,179 INFO L750 eck$LassoCheckResult]: Loop: 2338#L198-2true assume !false; 1990#L199true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 523#L202true assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 924#isBlocked_returnLabel#1true cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 619#L206true assume 1 != cleanup_~tmp___0~0#1; 2034#L206-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1782#L805-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1488#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1735#L1760true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 137#anyStopRequested_returnLabel#1true isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1164#isIdle_returnLabel#1true cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 797#L218true assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1091#L805-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1175#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 696#L2265-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2071#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2251#L2413-2true assume !(0 != timeShift_~tmp___9~2#1); 1941#L2504-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1949#L2504-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2094#L1856-2true assume !(1 == stopRequestedInDirection_~dir#1); 2127#L2025-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1208#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1681#L2512-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2238#L2232-3true assume !(1 == ~currentHeading~0); 2347#L2242-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1296#L2242-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 73#L2248-7true assume { :end_inline_continueInDirection } true; 1263#L2521-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1417#getCurrentFloorID_returnLabel#2true __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1829#L595-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 851#L596-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1459#areDoorsOpen_returnLabel#6true __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 113#L600-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 794#L655-1true assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2035#timeShift_returnLabel#2true assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2338#L198-2true [2022-12-13 12:38:08,184 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:08,185 INFO L85 PathProgramCache]: Analyzing trace with hash 1870806649, now seen corresponding path program 1 times [2022-12-13 12:38:08,193 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:08,194 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [749223551] [2022-12-13 12:38:08,194 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:08,195 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:08,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:08,476 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:08,477 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:08,477 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [749223551] [2022-12-13 12:38:08,478 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [749223551] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:08,478 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:08,478 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:08,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790914947] [2022-12-13 12:38:08,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:08,484 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:08,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:08,485 INFO L85 PathProgramCache]: Analyzing trace with hash 1058429863, now seen corresponding path program 1 times [2022-12-13 12:38:08,485 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:08,485 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1483984524] [2022-12-13 12:38:08,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:08,486 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:08,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:08,581 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:08,581 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:08,581 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1483984524] [2022-12-13 12:38:08,581 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1483984524] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:08,581 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:08,582 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 12:38:08,582 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730132557] [2022-12-13 12:38:08,582 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:08,583 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:08,584 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:08,605 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:38:08,606 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:38:08,610 INFO L87 Difference]: Start difference. First operand has 2387 states, 2386 states have (on average 1.8725901089689858) internal successors, (4468), 2386 states have internal predecessors, (4468), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:09,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:09,073 INFO L93 Difference]: Finished difference Result 4306 states and 7959 transitions. [2022-12-13 12:38:09,074 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 4306 states and 7959 transitions. [2022-12-13 12:38:09,107 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2137 [2022-12-13 12:38:09,162 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 4306 states to 4198 states and 7847 transitions. [2022-12-13 12:38:09,163 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 4198 [2022-12-13 12:38:09,171 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 4198 [2022-12-13 12:38:09,171 INFO L73 IsDeterministic]: Start isDeterministic. Operand 4198 states and 7847 transitions. [2022-12-13 12:38:09,184 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:09,184 INFO L218 hiAutomatonCegarLoop]: Abstraction has 4198 states and 7847 transitions. [2022-12-13 12:38:09,209 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 4198 states and 7847 transitions. [2022-12-13 12:38:09,289 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 4198 to 2368. [2022-12-13 12:38:09,293 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2368 states, 2368 states have (on average 1.8745777027027026) internal successors, (4439), 2367 states have internal predecessors, (4439), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:09,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2368 states to 2368 states and 4439 transitions. [2022-12-13 12:38:09,299 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2368 states and 4439 transitions. [2022-12-13 12:38:09,300 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-12-13 12:38:09,303 INFO L428 stractBuchiCegarLoop]: Abstraction has 2368 states and 4439 transitions. [2022-12-13 12:38:09,303 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-12-13 12:38:09,304 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2368 states and 4439 transitions. [2022-12-13 12:38:09,317 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1179 [2022-12-13 12:38:09,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:09,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:09,319 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:09,319 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:09,320 INFO L748 eck$LassoCheckResult]: Stem: 7097#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 7098#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 8313#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 7799#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 7800#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 8004#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 8852#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 6991#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 6992#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 7124#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 7125#L1076 assume 0 == initPersonOnFloor_~floor#1; 8118#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 7065#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 7066#L868 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 7229#L880-2 assume { :end_inline_callOnFloor } true; 8411#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 7594#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 7595#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 6853#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 6941#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 8356#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 8357#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 7890#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 7891#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 9090#L2413 assume !(0 != timeShift_~tmp___9~2#1); 9006#L2504 assume !(1 == ~doorState~0); 9007#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7644#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 7645#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 6880#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 8913#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 9059#L2232 assume !(1 == ~currentHeading~0); 8426#L2242 assume !(0 == ~currentFloorID~0); 8089#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 8090#L2248-1 assume { :end_inline_continueInDirection } true; 8576#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 8497#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 7359#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 7360#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 8061#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 6988#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 6989#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7915#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 9039#L198-2 [2022-12-13 12:38:09,320 INFO L750 eck$LassoCheckResult]: Loop: 9039#L198-2 assume !false; 9033#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 7769#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 7770#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 7913#L206 assume 1 != cleanup_~tmp___0~0#1; 7914#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 8951#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 7188#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 8787#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 6970#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 7049#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 8138#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 8139#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 8476#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 8018#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 8020#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 7551#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 7863#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 8506#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 9091#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 9018#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 9019#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 9021#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 9061#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 6934#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 8577#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 8907#L2232-3 assume !(1 == ~currentHeading~0); 9081#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 8637#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6907#L2248-7 assume { :end_inline_continueInDirection } true; 6778#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 8617#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 8729#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 8208#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 8209#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 7000#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 6863#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 8133#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 9039#L198-2 [2022-12-13 12:38:09,321 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:09,321 INFO L85 PathProgramCache]: Analyzing trace with hash 236095066, now seen corresponding path program 1 times [2022-12-13 12:38:09,321 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:09,321 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2066563165] [2022-12-13 12:38:09,321 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:09,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:09,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:09,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:09,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:09,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2066563165] [2022-12-13 12:38:09,396 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2066563165] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:09,396 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:09,396 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:09,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [160150535] [2022-12-13 12:38:09,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:09,397 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:09,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:09,398 INFO L85 PathProgramCache]: Analyzing trace with hash 1763980808, now seen corresponding path program 1 times [2022-12-13 12:38:09,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:09,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1223486359] [2022-12-13 12:38:09,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:09,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:09,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:09,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:09,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:09,474 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1223486359] [2022-12-13 12:38:09,475 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1223486359] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:09,475 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:09,475 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:09,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2129830343] [2022-12-13 12:38:09,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:09,476 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:09,476 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:09,476 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:38:09,476 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:38:09,477 INFO L87 Difference]: Start difference. First operand 2368 states and 4439 transitions. cyclomatic complexity: 2072 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:11,299 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:11,299 INFO L93 Difference]: Finished difference Result 22211 states and 41537 transitions. [2022-12-13 12:38:11,299 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22211 states and 41537 transitions. [2022-12-13 12:38:11,386 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 14714 [2022-12-13 12:38:11,455 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22211 states to 22211 states and 41537 transitions. [2022-12-13 12:38:11,456 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22211 [2022-12-13 12:38:11,472 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22211 [2022-12-13 12:38:11,473 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22211 states and 41537 transitions. [2022-12-13 12:38:11,490 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:11,490 INFO L218 hiAutomatonCegarLoop]: Abstraction has 22211 states and 41537 transitions. [2022-12-13 12:38:11,532 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22211 states and 41537 transitions. [2022-12-13 12:38:11,643 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22211 to 4688. [2022-12-13 12:38:11,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4688 states, 4688 states have (on average 1.8739334470989761) internal successors, (8785), 4687 states have internal predecessors, (8785), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:11,656 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4688 states to 4688 states and 8785 transitions. [2022-12-13 12:38:11,657 INFO L240 hiAutomatonCegarLoop]: Abstraction has 4688 states and 8785 transitions. [2022-12-13 12:38:11,657 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-13 12:38:11,658 INFO L428 stractBuchiCegarLoop]: Abstraction has 4688 states and 8785 transitions. [2022-12-13 12:38:11,658 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-12-13 12:38:11,658 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 4688 states and 8785 transitions. [2022-12-13 12:38:11,669 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2364 [2022-12-13 12:38:11,669 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:11,670 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:11,671 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:11,671 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:11,671 INFO L748 eck$LassoCheckResult]: Stem: 31725#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 31726#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 32964#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 32432#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 32433#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 32648#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 33558#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 31619#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 31620#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 31752#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 31753#L1076 assume 0 == initPersonOnFloor_~floor#1; 32764#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 31693#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 31694#L868 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 33807#L880-2 assume { :end_inline_callOnFloor } true; 33068#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 33069#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 33571#L805 assume !(0 == isFloorCalling_~floorID#1); 33572#L809 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 33994#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 33993#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 33991#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 33987#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 33986#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 33985#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 33983#L2413 assume !(0 != timeShift_~tmp___9~2#1); 33982#L2504 assume !(1 == ~doorState~0); 33981#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 33979#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 33604#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 31506#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 33630#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 33802#L2232 assume !(1 == ~currentHeading~0); 33866#L2242 assume !(0 == ~currentFloorID~0); 32733#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 32734#L2248-1 assume { :end_inline_continueInDirection } true; 33945#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 33944#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 33943#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 33942#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 33939#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 33932#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 33923#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 33922#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 33920#L198-2 [2022-12-13 12:38:11,671 INFO L750 eck$LassoCheckResult]: Loop: 33920#L198-2 assume !false; 33919#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 33918#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 33917#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 33916#L206 assume 1 != cleanup_~tmp___0~0#1; 33876#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 33673#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 33478#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 33479#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 33647#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 33877#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 33873#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 33136#L805-26 assume !(0 == isFloorCalling_~floorID#1); 33138#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 35092#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 35091#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 35089#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 35085#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 35084#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 35083#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 35081#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 35080#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 35079#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 35077#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 35054#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 35048#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 33621#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 33623#L2232-3 assume !(1 == ~currentHeading~0); 33836#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 33312#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 33313#L2248-7 assume { :end_inline_continueInDirection } true; 35016#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 35015#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 35014#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 35013#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 35010#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 35003#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 34994#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 33921#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 33920#L198-2 [2022-12-13 12:38:11,672 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:11,672 INFO L85 PathProgramCache]: Analyzing trace with hash 1284691731, now seen corresponding path program 1 times [2022-12-13 12:38:11,672 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:11,672 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [95373196] [2022-12-13 12:38:11,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:11,673 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:11,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:11,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:11,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:11,716 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [95373196] [2022-12-13 12:38:11,716 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [95373196] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:11,716 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:11,716 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:11,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1906065106] [2022-12-13 12:38:11,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:11,717 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:11,717 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:11,717 INFO L85 PathProgramCache]: Analyzing trace with hash 172725313, now seen corresponding path program 1 times [2022-12-13 12:38:11,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:11,718 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [429383770] [2022-12-13 12:38:11,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:11,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:11,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:11,806 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:11,806 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:11,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [429383770] [2022-12-13 12:38:11,807 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [429383770] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:11,807 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:11,807 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:11,807 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458330266] [2022-12-13 12:38:11,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:11,808 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:11,808 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:11,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:38:11,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:38:11,809 INFO L87 Difference]: Start difference. First operand 4688 states and 8785 transitions. cyclomatic complexity: 4098 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:14,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:14,193 INFO L93 Difference]: Finished difference Result 16542 states and 30910 transitions. [2022-12-13 12:38:14,194 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16542 states and 30910 transitions. [2022-12-13 12:38:14,238 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8863 [2022-12-13 12:38:14,287 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16542 states to 16542 states and 30910 transitions. [2022-12-13 12:38:14,287 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16542 [2022-12-13 12:38:14,302 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16542 [2022-12-13 12:38:14,302 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16542 states and 30910 transitions. [2022-12-13 12:38:14,322 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:14,322 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16542 states and 30910 transitions. [2022-12-13 12:38:14,342 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16542 states and 30910 transitions. [2022-12-13 12:38:14,489 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16542 to 8414. [2022-12-13 12:38:14,499 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8414 states, 8414 states have (on average 1.8716425005942476) internal successors, (15748), 8413 states have internal predecessors, (15748), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:14,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8414 states to 8414 states and 15748 transitions. [2022-12-13 12:38:14,511 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8414 states and 15748 transitions. [2022-12-13 12:38:14,512 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 23 states. [2022-12-13 12:38:14,512 INFO L428 stractBuchiCegarLoop]: Abstraction has 8414 states and 15748 transitions. [2022-12-13 12:38:14,512 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-12-13 12:38:14,512 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8414 states and 15748 transitions. [2022-12-13 12:38:14,533 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4279 [2022-12-13 12:38:14,533 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:14,533 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:14,535 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:14,535 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:14,536 INFO L748 eck$LassoCheckResult]: Stem: 53012#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 53013#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 54266#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 53724#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 53725#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 53941#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 54850#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 52905#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 52906#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 53039#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 53040#L1076 assume 0 == initPersonOnFloor_~floor#1; 54061#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 52979#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 52980#L868 assume !(0 == callOnFloor_~floorID#1); 55119#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 53145#L880-2 assume { :end_inline_callOnFloor } true; 55109#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 53515#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 53516#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 55179#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 55182#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 55181#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 54397#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 53817#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 53819#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 55238#L2413 assume !(0 != timeShift_~tmp___9~2#1); 55033#L2504 assume !(1 == ~doorState~0); 55034#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 53567#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 53568#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 52997#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 54921#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 55111#L2232 assume !(1 == ~currentHeading~0); 60938#L2242 assume !(0 == ~currentFloorID~0); 54032#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 54033#L2248-1 assume { :end_inline_continueInDirection } true; 54548#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 54461#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 53275#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 53276#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 54000#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 52902#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 52903#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 53844#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 55074#L198-2 [2022-12-13 12:38:14,536 INFO L750 eck$LassoCheckResult]: Loop: 55074#L198-2 assume !false; 55065#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 53693#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 53694#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 55234#L206 assume 1 != cleanup_~tmp___0~0#1; 55228#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 55223#L805-21 assume !(0 == isFloorCalling_~floorID#1); 55217#L809-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 55205#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 55194#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 55189#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 55188#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 55187#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 55186#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 55185#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 55184#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 55183#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 53471#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 53789#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 54472#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 55239#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 55046#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 55047#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 55050#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 55114#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 52847#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 54549#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 60940#L2232-3 assume !(1 == ~currentHeading~0); 60939#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54613#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52820#L2248-7 assume { :end_inline_continueInDirection } true; 52691#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 54593#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 54711#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 54155#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 54156#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 52914#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 52776#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 54078#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 55074#L198-2 [2022-12-13 12:38:14,536 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:14,536 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 1 times [2022-12-13 12:38:14,537 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:14,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [258673259] [2022-12-13 12:38:14,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:14,537 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:14,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:14,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:14,586 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:14,586 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [258673259] [2022-12-13 12:38:14,586 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [258673259] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:14,586 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:14,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:14,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [97473790] [2022-12-13 12:38:14,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:14,587 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:14,587 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:14,588 INFO L85 PathProgramCache]: Analyzing trace with hash 322819123, now seen corresponding path program 1 times [2022-12-13 12:38:14,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:14,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [205687286] [2022-12-13 12:38:14,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:14,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:14,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:14,611 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:14,611 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:14,611 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [205687286] [2022-12-13 12:38:14,611 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [205687286] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:14,612 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:14,612 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:14,612 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [809834519] [2022-12-13 12:38:14,612 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:14,612 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:14,612 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:14,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:38:14,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:38:14,613 INFO L87 Difference]: Start difference. First operand 8414 states and 15748 transitions. cyclomatic complexity: 7335 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:14,963 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:14,963 INFO L93 Difference]: Finished difference Result 9184 states and 17068 transitions. [2022-12-13 12:38:14,963 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9184 states and 17068 transitions. [2022-12-13 12:38:14,984 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4640 [2022-12-13 12:38:15,002 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9184 states to 9184 states and 17068 transitions. [2022-12-13 12:38:15,003 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9184 [2022-12-13 12:38:15,007 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9184 [2022-12-13 12:38:15,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9184 states and 17068 transitions. [2022-12-13 12:38:15,013 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:15,014 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9184 states and 17068 transitions. [2022-12-13 12:38:15,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9184 states and 17068 transitions. [2022-12-13 12:38:15,110 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9184 to 8260. [2022-12-13 12:38:15,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8260 states, 8260 states have (on average 1.8682808716707022) internal successors, (15432), 8259 states have internal predecessors, (15432), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:15,134 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8260 states to 8260 states and 15432 transitions. [2022-12-13 12:38:15,135 INFO L240 hiAutomatonCegarLoop]: Abstraction has 8260 states and 15432 transitions. [2022-12-13 12:38:15,135 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:38:15,135 INFO L428 stractBuchiCegarLoop]: Abstraction has 8260 states and 15432 transitions. [2022-12-13 12:38:15,136 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-12-13 12:38:15,136 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8260 states and 15432 transitions. [2022-12-13 12:38:15,158 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4157 [2022-12-13 12:38:15,158 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:15,158 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:15,160 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:15,160 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:15,161 INFO L748 eck$LassoCheckResult]: Stem: 70617#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 70618#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 71840#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 71314#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 71315#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 71530#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 72426#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 70510#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 70511#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 70644#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 70645#L1076 assume 0 == initPersonOnFloor_~floor#1; 71647#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 70584#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 70585#L868 assume !(0 == callOnFloor_~floorID#1); 72699#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 70746#L880-2 assume { :end_inline_callOnFloor } true; 72689#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 71114#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 71115#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 72775#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 72774#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 72773#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 71973#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 71411#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 71412#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 78500#L2413 assume !(0 != timeShift_~tmp___9~2#1); 72612#L2504 assume !(1 == ~doorState~0); 72613#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 71165#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 71166#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 70602#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 72501#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 78299#L2232 assume !(1 == ~currentHeading~0); 78306#L2242 assume !(0 == ~currentFloorID~0); 71615#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 71616#L2248-1 assume { :end_inline_continueInDirection } true; 76178#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 76175#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 76174#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 76172#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 76170#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 76167#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 76154#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 76151#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 76150#L198-2 [2022-12-13 12:38:15,161 INFO L750 eck$LassoCheckResult]: Loop: 76150#L198-2 assume !false; 76149#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 72779#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 72778#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 72776#L206 assume 1 != cleanup_~tmp___0~0#1; 72777#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 72769#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 72770#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 72765#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 72766#L1764 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 72788#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 72787#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 72786#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 72785#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 72784#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 72783#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 72780#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 72781#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 72043#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 72045#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 77996#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 77990#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 77991#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 77973#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 77974#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 78081#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 78079#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 77927#L2232-3 assume !(1 == ~currentHeading~0); 77921#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 72190#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 72191#L2248-7 assume { :end_inline_continueInDirection } true; 77004#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 76963#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 76959#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 76955#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 76897#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 76158#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 76153#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 76152#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 76150#L198-2 [2022-12-13 12:38:15,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:15,161 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 2 times [2022-12-13 12:38:15,161 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:15,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1245452285] [2022-12-13 12:38:15,162 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:15,162 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:15,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:15,210 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:15,210 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:15,210 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1245452285] [2022-12-13 12:38:15,210 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1245452285] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:15,211 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:15,211 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:15,211 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036087669] [2022-12-13 12:38:15,211 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:15,211 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:15,212 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:15,212 INFO L85 PathProgramCache]: Analyzing trace with hash -1626448610, now seen corresponding path program 1 times [2022-12-13 12:38:15,212 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:15,212 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1810838999] [2022-12-13 12:38:15,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:15,212 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:15,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:15,252 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:15,252 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:15,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1810838999] [2022-12-13 12:38:15,253 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1810838999] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:15,253 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:15,253 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:15,253 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1621690367] [2022-12-13 12:38:15,253 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:15,254 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:15,254 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:15,254 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:15,255 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:15,255 INFO L87 Difference]: Start difference. First operand 8260 states and 15432 transitions. cyclomatic complexity: 7173 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:15,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:15,761 INFO L93 Difference]: Finished difference Result 33051 states and 61824 transitions. [2022-12-13 12:38:15,761 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33051 states and 61824 transitions. [2022-12-13 12:38:15,869 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 22048 [2022-12-13 12:38:15,926 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33051 states to 33051 states and 61824 transitions. [2022-12-13 12:38:15,926 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33051 [2022-12-13 12:38:15,942 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33051 [2022-12-13 12:38:15,942 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33051 states and 61824 transitions. [2022-12-13 12:38:15,957 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:15,957 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33051 states and 61824 transitions. [2022-12-13 12:38:15,972 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33051 states and 61824 transitions. [2022-12-13 12:38:16,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33051 to 14983. [2022-12-13 12:38:16,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8682506841086566) internal successors, (27992), 14982 states have internal predecessors, (27992), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:16,198 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27992 transitions. [2022-12-13 12:38:16,198 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27992 transitions. [2022-12-13 12:38:16,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 12:38:16,199 INFO L428 stractBuchiCegarLoop]: Abstraction has 14983 states and 27992 transitions. [2022-12-13 12:38:16,200 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-12-13 12:38:16,200 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27992 transitions. [2022-12-13 12:38:16,237 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2022-12-13 12:38:16,237 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:16,237 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:16,240 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:16,241 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:16,241 INFO L748 eck$LassoCheckResult]: Stem: 111951#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 111952#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 113206#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 112651#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 112652#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 112881#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 113831#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 111842#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 111843#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 111978#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 111979#L1076 assume 0 == initPersonOnFloor_~floor#1; 113002#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 111919#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 111920#L868 assume !(0 == callOnFloor_~floorID#1); 114130#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 112081#L880-2 assume { :end_inline_callOnFloor } true; 114117#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 112447#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 112448#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 114223#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 114221#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 114218#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 114219#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 114353#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 114351#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 114348#L2413 assume !(0 != timeShift_~tmp___9~2#1); 114346#L2504 assume !(1 == ~doorState~0); 114338#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 114317#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 114303#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 114289#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 114287#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 114288#L2232 assume !(1 == ~currentHeading~0); 114666#L2242 assume !(0 == ~currentFloorID~0); 112973#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 112974#L2248-1 assume { :end_inline_continueInDirection } true; 124787#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 124785#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 124783#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 124781#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 124777#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 124769#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 124759#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 122512#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 121835#L198-2 [2022-12-13 12:38:16,241 INFO L750 eck$LassoCheckResult]: Loop: 121835#L198-2 assume !false; 114877#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 114876#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 114875#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 114874#L206 assume 1 != cleanup_~tmp___0~0#1; 114873#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 114872#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 114871#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 114668#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 114667#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 114550#L805-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 114529#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 114519#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 114471#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 114469#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 114467#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 114464#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 114462#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 114458#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 114455#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 114449#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 114450#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 114445#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 114446#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 114438#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 114439#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 114398#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 114378#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 114366#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 114361#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 114358#L2232-3 assume !(1 == ~currentHeading~0); 114359#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 122550#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122547#L2248-7 assume { :end_inline_continueInDirection } true; 122543#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 122542#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 122540#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 122538#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 122537#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 122534#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 122525#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 122511#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 121835#L198-2 [2022-12-13 12:38:16,242 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:16,242 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 3 times [2022-12-13 12:38:16,242 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:16,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1318264605] [2022-12-13 12:38:16,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:16,243 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:16,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:16,291 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:16,291 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:16,291 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1318264605] [2022-12-13 12:38:16,291 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1318264605] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:16,292 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:16,292 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:16,292 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1153154136] [2022-12-13 12:38:16,292 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:16,292 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:16,293 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:16,293 INFO L85 PathProgramCache]: Analyzing trace with hash -2001494560, now seen corresponding path program 1 times [2022-12-13 12:38:16,293 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:16,293 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639162321] [2022-12-13 12:38:16,293 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:16,294 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:16,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:16,334 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:16,334 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:16,335 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639162321] [2022-12-13 12:38:16,335 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639162321] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:16,335 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:16,335 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:16,335 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [340571098] [2022-12-13 12:38:16,335 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:16,336 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:16,336 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:16,336 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:16,336 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:16,337 INFO L87 Difference]: Start difference. First operand 14983 states and 27992 transitions. cyclomatic complexity: 13010 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:16,943 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:16,943 INFO L93 Difference]: Finished difference Result 16346 states and 30283 transitions. [2022-12-13 12:38:16,943 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16346 states and 30283 transitions. [2022-12-13 12:38:17,002 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8998 [2022-12-13 12:38:17,027 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16346 states to 16346 states and 30283 transitions. [2022-12-13 12:38:17,027 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16346 [2022-12-13 12:38:17,033 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16346 [2022-12-13 12:38:17,034 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16346 states and 30283 transitions. [2022-12-13 12:38:17,047 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:17,047 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16346 states and 30283 transitions. [2022-12-13 12:38:17,055 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16346 states and 30283 transitions. [2022-12-13 12:38:17,167 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16346 to 14983. [2022-12-13 12:38:17,180 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14983 states, 14983 states have (on average 1.8586397917639992) internal successors, (27848), 14982 states have internal predecessors, (27848), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:17,199 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14983 states to 14983 states and 27848 transitions. [2022-12-13 12:38:17,199 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14983 states and 27848 transitions. [2022-12-13 12:38:17,199 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-12-13 12:38:17,200 INFO L428 stractBuchiCegarLoop]: Abstraction has 14983 states and 27848 transitions. [2022-12-13 12:38:17,200 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-12-13 12:38:17,200 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14983 states and 27848 transitions. [2022-12-13 12:38:17,252 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8252 [2022-12-13 12:38:17,252 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:17,252 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:17,254 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:17,255 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:17,255 INFO L748 eck$LassoCheckResult]: Stem: 143297#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 143298#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 144549#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 143999#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 144000#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 144223#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 145168#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 143188#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 143189#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 143326#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 143327#L1076 assume 0 == initPersonOnFloor_~floor#1; 144347#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 143262#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 143263#L868 assume !(0 == callOnFloor_~floorID#1); 145481#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 143426#L880-2 assume { :end_inline_callOnFloor } true; 145468#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 143795#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 143796#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 145584#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 145582#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 145579#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 145580#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 155209#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 155208#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 155207#L2413 assume !(0 != timeShift_~tmp___9~2#1); 145370#L2504 assume !(1 == ~doorState~0); 145371#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 143848#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 143849#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 157021#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 157622#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 157621#L2232 assume !(1 == ~currentHeading~0); 157620#L2242 assume !(0 == ~currentFloorID~0); 144314#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 144315#L2248-1 assume { :end_inline_continueInDirection } true; 144837#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 144743#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 143554#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 143555#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 145547#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 157512#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 157498#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 157496#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 145612#L198-2 [2022-12-13 12:38:17,255 INFO L750 eck$LassoCheckResult]: Loop: 145612#L198-2 assume !false; 145610#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 145607#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 145587#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 145586#L206 assume 1 != cleanup_~tmp___0~0#1; 145577#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 145578#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 145573#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 145574#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 145570#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 143548#L805-22 assume !(0 == isFloorCalling_~floorID#1); 143549#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 145229#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 145230#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 156490#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 156491#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 156486#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 156487#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 156511#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 156699#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 145467#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 143749#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 144067#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 156676#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 156677#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 156741#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 157029#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 157024#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 156961#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 156962#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 157824#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 157822#L2232-3 assume !(1 == ~currentHeading~0); 157820#L2242-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 144914#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 143102#L2248-7 assume { :end_inline_continueInDirection } true; 142972#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 144887#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 145028#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 144442#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 144443#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 143197#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 143058#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 144362#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 145612#L198-2 [2022-12-13 12:38:17,255 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:17,255 INFO L85 PathProgramCache]: Analyzing trace with hash 215036937, now seen corresponding path program 4 times [2022-12-13 12:38:17,255 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:17,255 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [840144952] [2022-12-13 12:38:17,255 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:17,256 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:17,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:17,287 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:17,287 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:17,287 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [840144952] [2022-12-13 12:38:17,287 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [840144952] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:17,287 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:17,287 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:17,287 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [664725871] [2022-12-13 12:38:17,288 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:17,288 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:17,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:17,288 INFO L85 PathProgramCache]: Analyzing trace with hash -24103594, now seen corresponding path program 1 times [2022-12-13 12:38:17,288 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:17,288 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1239460187] [2022-12-13 12:38:17,288 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:17,289 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:17,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:17,319 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:17,319 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:17,319 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1239460187] [2022-12-13 12:38:17,319 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1239460187] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:17,320 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:17,320 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:17,320 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065157258] [2022-12-13 12:38:17,320 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:17,320 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:17,320 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:17,321 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:17,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:17,321 INFO L87 Difference]: Start difference. First operand 14983 states and 27848 transitions. cyclomatic complexity: 12866 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:17,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:17,521 INFO L93 Difference]: Finished difference Result 22695 states and 41981 transitions. [2022-12-13 12:38:17,521 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22695 states and 41981 transitions. [2022-12-13 12:38:17,584 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15688 [2022-12-13 12:38:17,658 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22695 states to 22695 states and 41981 transitions. [2022-12-13 12:38:17,658 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22695 [2022-12-13 12:38:17,667 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22695 [2022-12-13 12:38:17,667 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22695 states and 41981 transitions. [2022-12-13 12:38:17,675 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:17,675 INFO L218 hiAutomatonCegarLoop]: Abstraction has 22695 states and 41981 transitions. [2022-12-13 12:38:17,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22695 states and 41981 transitions. [2022-12-13 12:38:17,782 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22695 to 15001. [2022-12-13 12:38:17,793 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15001 states, 15001 states have (on average 1.8576094927004867) internal successors, (27866), 15000 states have internal predecessors, (27866), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:17,813 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15001 states to 15001 states and 27866 transitions. [2022-12-13 12:38:17,813 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15001 states and 27866 transitions. [2022-12-13 12:38:17,814 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:38:17,814 INFO L428 stractBuchiCegarLoop]: Abstraction has 15001 states and 27866 transitions. [2022-12-13 12:38:17,814 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-12-13 12:38:17,814 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15001 states and 27866 transitions. [2022-12-13 12:38:17,844 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8264 [2022-12-13 12:38:17,844 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:17,844 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:17,847 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:17,847 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:17,847 INFO L748 eck$LassoCheckResult]: Stem: 180984#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 180985#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 182253#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 181690#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 181691#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 181922#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 182880#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 180876#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 180877#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 181012#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 181013#L1076 assume 0 == initPersonOnFloor_~floor#1; 182045#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 180952#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 180953#L868 assume !(0 == callOnFloor_~floorID#1); 183175#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 181113#L880-2 assume { :end_inline_callOnFloor } true; 183165#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 181483#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 181484#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 183266#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 183264#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 183261#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 183262#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 183426#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 183425#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 183423#L2413 assume !(0 != timeShift_~tmp___9~2#1); 183422#L2504 assume !(1 == ~doorState~0); 183421#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 183419#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 183420#L2025 assume !(0 == ~currentFloorID~0); 181878#L2031 assume !(~currentFloorID~0 > 0); 181880#$Ultimate##2182 assume ~currentFloorID~0 > 0; 181713#L2048 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 181715#L2049 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 183173#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 183539#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 194825#L2232 assume !(1 == ~currentHeading~0); 194823#L2242 assume !(0 == ~currentFloorID~0); 194818#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 194815#L2248-1 assume { :end_inline_continueInDirection } true; 194813#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 194812#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 194810#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 194809#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 194806#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 194799#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 194787#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 191788#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 191786#L198-2 [2022-12-13 12:38:17,847 INFO L750 eck$LassoCheckResult]: Loop: 191786#L198-2 assume !false; 191785#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 191784#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 191783#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 191775#L206 assume 1 != cleanup_~tmp___0~0#1; 191771#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 191767#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 191764#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 191762#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 183506#L1764 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 183483#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 183477#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 183474#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 183472#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 183471#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 183470#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 183469#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 183461#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 183452#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 183453#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 183444#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 183445#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 183097#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 183098#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 183333#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 183334#L2025-2 assume !(0 == ~currentFloorID~0); 192019#L2031-2 assume !(~currentFloorID~0 > 0); 181088#$Ultimate##4722 assume ~currentFloorID~0 > 0; 181090#L2048-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 181304#L2049-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 180814#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 193007#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 183220#L2232-3 assume !(1 == ~currentHeading~0); 183221#L2242-9 assume !(0 == ~currentFloorID~0); 191818#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 191812#L2248-7 assume { :end_inline_continueInDirection } true; 191808#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 191807#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 191805#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 191803#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 191802#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 191799#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 191790#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 191789#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 191786#L198-2 [2022-12-13 12:38:17,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:17,848 INFO L85 PathProgramCache]: Analyzing trace with hash -928351246, now seen corresponding path program 1 times [2022-12-13 12:38:17,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:17,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1769455903] [2022-12-13 12:38:17,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:17,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:17,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:17,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:17,923 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:17,923 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1769455903] [2022-12-13 12:38:17,924 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1769455903] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:17,924 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:17,924 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:17,924 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1836735547] [2022-12-13 12:38:17,924 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:17,924 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:17,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:17,925 INFO L85 PathProgramCache]: Analyzing trace with hash -889680442, now seen corresponding path program 1 times [2022-12-13 12:38:17,925 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:17,925 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399000697] [2022-12-13 12:38:17,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:17,925 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:17,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:17,960 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:17,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:17,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399000697] [2022-12-13 12:38:17,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1399000697] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:17,960 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:17,960 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:17,961 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1656576313] [2022-12-13 12:38:17,961 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:17,961 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:17,961 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:17,962 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:17,962 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:17,962 INFO L87 Difference]: Start difference. First operand 15001 states and 27866 transitions. cyclomatic complexity: 12866 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:19,017 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:19,017 INFO L93 Difference]: Finished difference Result 20451 states and 37908 transitions. [2022-12-13 12:38:19,017 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20451 states and 37908 transitions. [2022-12-13 12:38:19,100 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15875 [2022-12-13 12:38:19,154 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20451 states to 20451 states and 37908 transitions. [2022-12-13 12:38:19,154 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20451 [2022-12-13 12:38:19,168 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20451 [2022-12-13 12:38:19,168 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20451 states and 37908 transitions. [2022-12-13 12:38:19,180 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:19,180 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20451 states and 37908 transitions. [2022-12-13 12:38:19,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20451 states and 37908 transitions. [2022-12-13 12:38:19,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20451 to 11391. [2022-12-13 12:38:19,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11391 states, 11391 states have (on average 1.846896672811869) internal successors, (21038), 11390 states have internal predecessors, (21038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:19,373 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11391 states to 11391 states and 21038 transitions. [2022-12-13 12:38:19,374 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11391 states and 21038 transitions. [2022-12-13 12:38:19,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 12:38:19,375 INFO L428 stractBuchiCegarLoop]: Abstraction has 11391 states and 21038 transitions. [2022-12-13 12:38:19,375 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2022-12-13 12:38:19,375 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11391 states and 21038 transitions. [2022-12-13 12:38:19,395 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8308 [2022-12-13 12:38:19,395 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:19,395 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:19,397 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:19,397 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:19,397 INFO L748 eck$LassoCheckResult]: Stem: 216432#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 216433#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 217606#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 217088#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 217089#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 217293#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 218149#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 216328#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 216329#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 216457#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 216458#L1076 assume 0 == initPersonOnFloor_~floor#1; 217413#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 216399#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 216400#L868 assume !(0 == callOnFloor_~floorID#1); 218416#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 216551#L880-2 assume { :end_inline_callOnFloor } true; 218479#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 218478#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 218477#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 218476#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 218475#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 217648#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 217649#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 217179#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 217180#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 218474#L2413 assume !(0 != timeShift_~tmp___9~2#1); 218322#L2504 assume !(1 == ~doorState~0); 218323#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 216943#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 216944#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 217778#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 218219#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 218311#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 217964#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 217965#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 218450#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 216091#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 217954#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 218181#L2232-2 assume !(1 == ~currentHeading~0); 217044#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 216124#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 216125#L2248-5 assume { :end_inline_continueInDirection } true; 218092#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 223198#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 223197#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 223196#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 223193#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 223186#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 223177#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 218571#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 218569#L198-2 [2022-12-13 12:38:19,397 INFO L750 eck$LassoCheckResult]: Loop: 218569#L198-2 assume !false; 218570#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 223173#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 218564#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 218565#L206 assume 1 != cleanup_~tmp___0~0#1; 218560#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 218561#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 218556#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 218557#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 222999#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 226042#L805-22 assume !(0 == isFloorCalling_~floorID#1); 226626#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 226625#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 226616#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 226608#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 226607#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 226606#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 226605#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 218515#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 218514#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 218513#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 218512#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 218510#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 218509#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 218507#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 218339#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 218340#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 218342#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 218410#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 218419#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 223608#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 223607#L2287-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 223606#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 223605#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 223446#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 223440#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 223437#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 223438#L2232-5 assume !(1 == ~currentHeading~0); 227110#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 217349#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 223336#L2248-11 assume { :end_inline_continueInDirection } true; 223331#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 223330#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 223328#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 223326#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 223325#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 223322#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 223313#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 218572#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 218569#L198-2 [2022-12-13 12:38:19,398 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:19,398 INFO L85 PathProgramCache]: Analyzing trace with hash 2009615150, now seen corresponding path program 1 times [2022-12-13 12:38:19,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:19,398 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1835556670] [2022-12-13 12:38:19,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:19,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:19,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:19,449 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:19,449 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:19,449 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1835556670] [2022-12-13 12:38:19,450 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1835556670] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:19,450 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:19,450 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:19,450 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1466638826] [2022-12-13 12:38:19,450 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:19,450 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:19,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:19,451 INFO L85 PathProgramCache]: Analyzing trace with hash -1396249469, now seen corresponding path program 1 times [2022-12-13 12:38:19,451 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:19,451 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010938270] [2022-12-13 12:38:19,451 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:19,451 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:19,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:19,479 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:19,479 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:19,480 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010938270] [2022-12-13 12:38:19,480 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1010938270] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:19,480 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:19,480 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:19,480 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1373900954] [2022-12-13 12:38:19,480 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:19,480 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:19,480 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:19,481 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:19,481 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:19,481 INFO L87 Difference]: Start difference. First operand 11391 states and 21038 transitions. cyclomatic complexity: 9648 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:19,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:19,654 INFO L93 Difference]: Finished difference Result 34119 states and 62953 transitions. [2022-12-13 12:38:19,654 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34119 states and 62953 transitions. [2022-12-13 12:38:19,785 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 30867 [2022-12-13 12:38:19,875 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34119 states to 34119 states and 62953 transitions. [2022-12-13 12:38:19,875 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34119 [2022-12-13 12:38:19,901 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34119 [2022-12-13 12:38:19,901 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34119 states and 62953 transitions. [2022-12-13 12:38:19,919 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:19,919 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34119 states and 62953 transitions. [2022-12-13 12:38:19,940 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34119 states and 62953 transitions. [2022-12-13 12:38:20,084 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34119 to 11403. [2022-12-13 12:38:20,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11403 states, 11403 states have (on average 1.8460054371656582) internal successors, (21050), 11402 states have internal predecessors, (21050), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:20,186 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11403 states to 11403 states and 21050 transitions. [2022-12-13 12:38:20,187 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11403 states and 21050 transitions. [2022-12-13 12:38:20,187 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:38:20,188 INFO L428 stractBuchiCegarLoop]: Abstraction has 11403 states and 21050 transitions. [2022-12-13 12:38:20,188 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2022-12-13 12:38:20,188 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11403 states and 21050 transitions. [2022-12-13 12:38:20,205 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8318 [2022-12-13 12:38:20,205 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:20,205 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:20,205 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:20,205 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:20,206 INFO L748 eck$LassoCheckResult]: Stem: 261957#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 261958#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 263128#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 262610#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 262611#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 262813#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 263702#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 261848#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 261849#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 261982#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 261983#L1076 assume 0 == initPersonOnFloor_~floor#1; 262929#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 261923#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 261924#L868 assume !(0 == callOnFloor_~floorID#1); 263985#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 262077#L880-2 assume { :end_inline_callOnFloor } true; 264060#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 264059#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 264058#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 264057#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 264056#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 263170#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 263171#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 262699#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 262701#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 264054#L2413 assume !(0 != timeShift_~tmp___9~2#1); 263897#L2504 assume !(1 == ~doorState~0); 263898#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 262466#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 262467#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 263304#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 263779#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 263882#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 263883#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 264052#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 264042#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 261612#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 263497#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 263738#L2232-2 assume !(1 == ~currentHeading~0); 262564#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 261645#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 261646#L2248-5 assume { :end_inline_continueInDirection } true; 263643#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 267441#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 267440#L595 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 267439#L596 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 267438#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 267436#L600 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 267418#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 267415#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 267414#L198-2 [2022-12-13 12:38:20,206 INFO L750 eck$LassoCheckResult]: Loop: 267414#L198-2 assume !false; 267413#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 267412#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 267411#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 266921#L206 assume 1 != cleanup_~tmp___0~0#1; 266920#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 266919#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 266918#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 266916#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 266914#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 266913#L805-22 assume !(0 == isFloorCalling_~floorID#1); 266909#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 266908#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 264170#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 264161#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 264162#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 264157#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 264158#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 264155#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 264154#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 264153#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 264152#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 264150#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 264149#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 264147#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 264146#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 264134#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 264115#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 264103#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 264089#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 264070#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 264068#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 264067#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 264066#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 263958#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 263737#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 267463#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 267460#L2232-5 assume !(1 == ~currentHeading~0); 267457#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 267456#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 267455#L2248-11 assume { :end_inline_continueInDirection } true; 267452#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 267450#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 267448#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 267447#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 267446#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 267427#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 267417#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 267416#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 267414#L198-2 [2022-12-13 12:38:20,206 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:20,206 INFO L85 PathProgramCache]: Analyzing trace with hash 2009615150, now seen corresponding path program 2 times [2022-12-13 12:38:20,206 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:20,206 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [504873859] [2022-12-13 12:38:20,206 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:20,206 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:20,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:20,237 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:20,237 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:20,237 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [504873859] [2022-12-13 12:38:20,238 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [504873859] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:20,238 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:20,238 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:20,238 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1807846469] [2022-12-13 12:38:20,238 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:20,238 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:20,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:20,239 INFO L85 PathProgramCache]: Analyzing trace with hash 904573121, now seen corresponding path program 1 times [2022-12-13 12:38:20,239 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:20,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1173911609] [2022-12-13 12:38:20,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:20,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:20,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:20,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:20,329 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:20,329 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1173911609] [2022-12-13 12:38:20,330 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1173911609] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:20,330 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:20,330 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:20,330 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2119414126] [2022-12-13 12:38:20,330 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:20,330 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:20,330 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:20,331 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:38:20,331 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:38:20,331 INFO L87 Difference]: Start difference. First operand 11403 states and 21050 transitions. cyclomatic complexity: 9648 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:21,399 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:21,400 INFO L93 Difference]: Finished difference Result 27316 states and 50222 transitions. [2022-12-13 12:38:21,400 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27316 states and 50222 transitions. [2022-12-13 12:38:21,521 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24210 [2022-12-13 12:38:21,575 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27316 states to 27316 states and 50222 transitions. [2022-12-13 12:38:21,575 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27316 [2022-12-13 12:38:21,590 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27316 [2022-12-13 12:38:21,590 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27316 states and 50222 transitions. [2022-12-13 12:38:21,603 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:21,603 INFO L218 hiAutomatonCegarLoop]: Abstraction has 27316 states and 50222 transitions. [2022-12-13 12:38:21,612 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27316 states and 50222 transitions. [2022-12-13 12:38:21,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27316 to 14898. [2022-12-13 12:38:21,739 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14898 states, 14898 states have (on average 1.8501141092764128) internal successors, (27563), 14897 states have internal predecessors, (27563), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:21,758 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14898 states to 14898 states and 27563 transitions. [2022-12-13 12:38:21,758 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27563 transitions. [2022-12-13 12:38:21,758 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2022-12-13 12:38:21,759 INFO L428 stractBuchiCegarLoop]: Abstraction has 14898 states and 27563 transitions. [2022-12-13 12:38:21,759 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2022-12-13 12:38:21,759 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14898 states and 27563 transitions. [2022-12-13 12:38:21,788 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:21,788 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:21,788 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:21,791 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:21,791 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:21,791 INFO L748 eck$LassoCheckResult]: Stem: 300711#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 300712#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 301885#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 301371#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 301372#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 301572#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 302442#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 300602#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 300603#L458 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 300737#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 300738#L1076 assume 0 == initPersonOnFloor_~floor#1; 301687#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 300677#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 300678#L868 assume !(0 == callOnFloor_~floorID#1); 302715#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 300832#L880-2 assume { :end_inline_callOnFloor } true; 302781#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 302780#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 302779#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 302778#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 302777#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 301925#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 301926#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 301463#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 301464#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 302776#L2413 assume !(0 != timeShift_~tmp___9~2#1); 302628#L2504 assume !(1 == ~doorState~0); 302629#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 301228#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 301229#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 302056#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 302512#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 302614#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 302615#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 302774#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 302764#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 300366#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 302243#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 302477#L2232-2 assume !(1 == ~currentHeading~0); 301327#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 300399#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 300400#L2248-5 assume { :end_inline_continueInDirection } true; 302380#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 302782#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 300953#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 300954#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 308239#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 308242#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 308241#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 308238#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 308236#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 308235#L198-2 [2022-12-13 12:38:21,792 INFO L750 eck$LassoCheckResult]: Loop: 308235#L198-2 assume !false; 308234#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 308233#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 308232#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 308231#L206 assume 1 != cleanup_~tmp___0~0#1; 308214#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 308209#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 308197#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 308139#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 308136#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 308133#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 308117#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 308113#L805-26 assume !(0 == isFloorCalling_~floorID#1); 308108#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 308103#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 308099#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 308100#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 305964#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 305961#L2415-2 assume !(0 != ~persons_0~0); 305952#L2415-3 assume !(0 != ~persons_1~0); 305942#L2429-1 assume !(0 != ~persons_2~0); 305936#L2443-1 assume !(0 != ~persons_3~0); 305913#L2457-1 assume !(0 != ~persons_4~0); 305911#L2471-1 assume !(0 != ~persons_5~0); 305907#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 305905#L896-12 assume 0 == isPersonOnFloor_~floor#1; 305454#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 305430#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 305428#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 305429#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 305785#L896-14 assume 0 == isPersonOnFloor_~floor#1; 305779#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 305744#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 305742#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 305740#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 305739#L896-16 assume 0 == isPersonOnFloor_~floor#1; 305713#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 305682#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 305680#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 305681#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 307959#L896-18 assume 0 == isPersonOnFloor_~floor#1; 307931#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 307926#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 305571#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 305568#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 305565#L896-20 assume 0 == isPersonOnFloor_~floor#1; 305080#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 305067#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 305065#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 305063#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 305062#L896-22 assume 0 == isPersonOnFloor_~floor#1; 305036#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 305026#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 305024#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 305025#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 308182#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 308183#L852-41 assume { :end_inline_resetCallOnFloor } true; 308274#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 308271#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 304803#L1635-5 assume { :end_inline_resetFloorButton } true; 308265#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 308264#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 308263#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 308262#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 308260#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 308256#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 308247#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 308246#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 308237#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 308235#L198-2 [2022-12-13 12:38:21,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:21,792 INFO L85 PathProgramCache]: Analyzing trace with hash 182607256, now seen corresponding path program 1 times [2022-12-13 12:38:21,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:21,792 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [928621041] [2022-12-13 12:38:21,792 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:21,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:21,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:21,844 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:21,844 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:21,844 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [928621041] [2022-12-13 12:38:21,844 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [928621041] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:21,845 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:21,845 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:21,845 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1758466943] [2022-12-13 12:38:21,845 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:21,845 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:21,845 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:21,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1739597543, now seen corresponding path program 1 times [2022-12-13 12:38:21,846 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:21,846 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [215773021] [2022-12-13 12:38:21,846 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:21,846 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:21,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:21,930 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:21,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:21,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [215773021] [2022-12-13 12:38:21,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [215773021] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:21,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:21,930 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:21,930 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1934804556] [2022-12-13 12:38:21,930 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:21,931 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:21,931 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:21,931 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:38:21,931 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:38:21,931 INFO L87 Difference]: Start difference. First operand 14898 states and 27563 transitions. cyclomatic complexity: 12666 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:21,994 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:21,995 INFO L93 Difference]: Finished difference Result 14898 states and 27557 transitions. [2022-12-13 12:38:21,995 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14898 states and 27557 transitions. [2022-12-13 12:38:22,035 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:22,115 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14898 states to 14898 states and 27557 transitions. [2022-12-13 12:38:22,115 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14898 [2022-12-13 12:38:22,123 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14898 [2022-12-13 12:38:22,123 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14898 states and 27557 transitions. [2022-12-13 12:38:22,131 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:22,131 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2022-12-13 12:38:22,136 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14898 states and 27557 transitions. [2022-12-13 12:38:22,248 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14898 to 14898. [2022-12-13 12:38:22,258 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14898 states, 14898 states have (on average 1.849711370653779) internal successors, (27557), 14897 states have internal predecessors, (27557), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:22,286 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14898 states to 14898 states and 27557 transitions. [2022-12-13 12:38:22,286 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2022-12-13 12:38:22,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:38:22,287 INFO L428 stractBuchiCegarLoop]: Abstraction has 14898 states and 27557 transitions. [2022-12-13 12:38:22,287 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2022-12-13 12:38:22,287 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14898 states and 27557 transitions. [2022-12-13 12:38:22,328 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:22,328 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:22,328 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:22,332 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:22,332 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:22,332 INFO L748 eck$LassoCheckResult]: Stem: 330512#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 330513#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 331667#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 331161#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 331162#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 331358#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 332195#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 330408#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 330409#L458 assume !(0 == getOrigin_~person#1); 332031#L462 assume !(1 == getOrigin_~person#1); 332153#L466 assume !(2 == getOrigin_~person#1); 331771#L470 assume !(3 == getOrigin_~person#1); 331772#L474 assume !(4 == getOrigin_~person#1); 331987#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 330537#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 330538#L1076 assume 0 == initPersonOnFloor_~floor#1; 331475#L1077 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 330479#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 330480#L868 assume !(0 == callOnFloor_~floorID#1); 332446#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 330632#L880-2 assume { :end_inline_callOnFloor } true; 332498#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 332497#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 332496#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 332495#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 332494#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 331705#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 331706#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 331251#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 331252#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 332493#L2413 assume !(0 != timeShift_~tmp___9~2#1); 332367#L2504 assume !(1 == ~doorState~0); 332368#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 331018#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 331019#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 331836#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 332255#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 332354#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 332355#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 332491#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 332483#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 330173#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 332009#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 332222#L2232-2 assume !(1 == ~currentHeading~0); 331117#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 330206#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 330207#L2248-5 assume { :end_inline_continueInDirection } true; 332142#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 333441#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 330753#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 330754#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 343892#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 343897#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 343895#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 342063#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 336598#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 336596#L198-2 [2022-12-13 12:38:22,332 INFO L750 eck$LassoCheckResult]: Loop: 336596#L198-2 assume !false; 336594#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 336587#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 336585#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 336583#L206 assume 1 != cleanup_~tmp___0~0#1; 334530#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 332504#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 332503#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 332501#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 332502#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 342469#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 342468#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 342467#L805-26 assume !(0 == isFloorCalling_~floorID#1); 342466#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 341627#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 341625#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 341522#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 339549#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 339546#L2415-2 assume !(0 != ~persons_0~0); 339537#L2415-3 assume !(0 != ~persons_1~0); 339527#L2429-1 assume !(0 != ~persons_2~0); 339521#L2443-1 assume !(0 != ~persons_3~0); 339498#L2457-1 assume !(0 != ~persons_4~0); 339496#L2471-1 assume !(0 != ~persons_5~0); 339492#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 339491#L896-12 assume 0 == isPersonOnFloor_~floor#1; 339474#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 339444#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 339442#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 339440#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 339439#L896-14 assume 0 == isPersonOnFloor_~floor#1; 339432#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 339397#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 339395#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 339393#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 339392#L896-16 assume 0 == isPersonOnFloor_~floor#1; 339377#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 339345#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 339341#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 339339#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 339338#L896-18 assume 0 == isPersonOnFloor_~floor#1; 339307#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 339296#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 339294#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 339292#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 339291#L896-20 assume 0 == isPersonOnFloor_~floor#1; 339262#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 339255#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 339253#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 339254#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 340025#L896-22 assume 0 == isPersonOnFloor_~floor#1; 339999#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 338960#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 338958#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 338959#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 338638#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 338633#L852-41 assume { :end_inline_resetCallOnFloor } true; 338631#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 338630#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 336648#L1635-5 assume { :end_inline_resetFloorButton } true; 336644#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 336642#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 336641#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 336640#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 336611#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 336616#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 336614#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 336603#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 336599#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 336596#L198-2 [2022-12-13 12:38:22,333 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:22,333 INFO L85 PathProgramCache]: Analyzing trace with hash 811806567, now seen corresponding path program 1 times [2022-12-13 12:38:22,333 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:22,333 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1233915616] [2022-12-13 12:38:22,333 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:22,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:22,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:22,414 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:22,414 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:22,414 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1233915616] [2022-12-13 12:38:22,414 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1233915616] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:22,414 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:22,414 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 12:38:22,414 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [456894144] [2022-12-13 12:38:22,414 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:22,415 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:22,415 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:22,415 INFO L85 PathProgramCache]: Analyzing trace with hash -1249470245, now seen corresponding path program 1 times [2022-12-13 12:38:22,415 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:22,415 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [605620989] [2022-12-13 12:38:22,415 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:22,415 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:22,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:22,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:22,485 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:22,485 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [605620989] [2022-12-13 12:38:22,486 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [605620989] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:22,486 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:22,486 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:22,486 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1986929546] [2022-12-13 12:38:22,486 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:22,486 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:22,486 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:22,487 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:38:22,487 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:38:22,487 INFO L87 Difference]: Start difference. First operand 14898 states and 27557 transitions. cyclomatic complexity: 12660 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:22,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:22,603 INFO L93 Difference]: Finished difference Result 14892 states and 27544 transitions. [2022-12-13 12:38:22,603 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14892 states and 27544 transitions. [2022-12-13 12:38:22,661 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:22,700 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14892 states to 14892 states and 27544 transitions. [2022-12-13 12:38:22,701 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14892 [2022-12-13 12:38:22,710 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14892 [2022-12-13 12:38:22,710 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14892 states and 27544 transitions. [2022-12-13 12:38:22,719 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:22,719 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2022-12-13 12:38:22,727 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14892 states and 27544 transitions. [2022-12-13 12:38:22,842 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14892 to 14892. [2022-12-13 12:38:22,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.849583669084072) internal successors, (27544), 14891 states have internal predecessors, (27544), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:22,878 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27544 transitions. [2022-12-13 12:38:22,878 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2022-12-13 12:38:22,879 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-12-13 12:38:22,879 INFO L428 stractBuchiCegarLoop]: Abstraction has 14892 states and 27544 transitions. [2022-12-13 12:38:22,879 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2022-12-13 12:38:22,879 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27544 transitions. [2022-12-13 12:38:22,922 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:22,922 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:22,922 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:22,926 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:22,926 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:22,926 INFO L748 eck$LassoCheckResult]: Stem: 360320#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 360321#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 361471#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 360970#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 360971#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 361169#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 362007#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 360218#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 360219#L458 assume !(0 == getOrigin_~person#1); 361836#L462 assume !(1 == getOrigin_~person#1); 361961#L466 assume !(2 == getOrigin_~person#1); 361581#L470 assume !(3 == getOrigin_~person#1); 361582#L474 assume !(4 == getOrigin_~person#1); 361791#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 360345#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 360346#L1076 assume !(0 == initPersonOnFloor_~floor#1); 361601#L1103 assume 1 == initPersonOnFloor_~floor#1; 362090#L1104 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 360289#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 360290#L868 assume !(0 == callOnFloor_~floorID#1); 362254#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 360440#L880-2 assume { :end_inline_callOnFloor } true; 362310#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 362309#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 362308#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 362307#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 362306#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 361511#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 361512#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 361059#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 361060#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 362305#L2413 assume !(0 != timeShift_~tmp___9~2#1); 362177#L2504 assume !(1 == ~doorState~0); 362178#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 360829#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 360830#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 361643#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 362075#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 362167#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 362168#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 362303#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 362297#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 359984#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 361814#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 362038#L2232-2 assume !(1 == ~currentHeading~0); 360925#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 360017#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 360018#L2248-5 assume { :end_inline_continueInDirection } true; 361886#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 361640#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 360560#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 360561#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 374213#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 374218#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 374216#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 374211#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 374034#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 374031#L198-2 [2022-12-13 12:38:22,926 INFO L750 eck$LassoCheckResult]: Loop: 374031#L198-2 assume !false; 374030#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 374029#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 374028#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 374027#L206 assume 1 != cleanup_~tmp___0~0#1; 374026#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 373994#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 367831#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 362381#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 362382#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 368352#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 368350#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 368351#L805-26 assume !(0 == isFloorCalling_~floorID#1); 367841#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 367837#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 367835#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 362352#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 374698#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 362348#L2415-2 assume !(0 != ~persons_0~0); 371486#L2415-3 assume !(0 != ~persons_1~0); 371477#L2429-1 assume !(0 != ~persons_2~0); 371473#L2443-1 assume !(0 != ~persons_3~0); 371454#L2457-1 assume !(0 != ~persons_4~0); 371452#L2471-1 assume !(0 != ~persons_5~0); 371449#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 371448#L896-12 assume 0 == isPersonOnFloor_~floor#1; 371418#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 371388#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 371386#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 371384#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 371383#L896-14 assume 0 == isPersonOnFloor_~floor#1; 371377#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 371348#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 371346#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 371347#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 371833#L896-16 assume 0 == isPersonOnFloor_~floor#1; 371827#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 371790#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 371788#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 371786#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 371785#L896-18 assume 0 == isPersonOnFloor_~floor#1; 371719#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 371712#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 371710#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 371711#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 372177#L896-20 assume 0 == isPersonOnFloor_~floor#1; 372148#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 372135#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 372133#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 372131#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 372130#L896-22 assume 0 == isPersonOnFloor_~floor#1; 372104#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 372093#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 372090#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 372091#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 373560#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 360064#L852-41 assume { :end_inline_resetCallOnFloor } true; 360065#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 361207#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 361283#L1635-5 assume { :end_inline_resetFloorButton } true; 360020#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 374207#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 374206#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 374205#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 374040#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 374045#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 374043#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 374037#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 374035#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 374031#L198-2 [2022-12-13 12:38:22,926 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:22,927 INFO L85 PathProgramCache]: Analyzing trace with hash 750066468, now seen corresponding path program 1 times [2022-12-13 12:38:22,927 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:22,927 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1676274962] [2022-12-13 12:38:22,927 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:22,927 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:22,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:22,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:22,980 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:22,980 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1676274962] [2022-12-13 12:38:22,980 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1676274962] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:22,981 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:22,981 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:22,981 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1704293747] [2022-12-13 12:38:22,981 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:22,981 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:22,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:22,982 INFO L85 PathProgramCache]: Analyzing trace with hash -1249470245, now seen corresponding path program 2 times [2022-12-13 12:38:22,982 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:22,982 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179672446] [2022-12-13 12:38:22,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:22,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:22,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:23,049 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:23,049 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:23,049 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179672446] [2022-12-13 12:38:23,049 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179672446] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:23,049 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:23,049 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:23,049 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1551617537] [2022-12-13 12:38:23,050 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:23,050 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:23,050 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:23,050 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:23,050 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:23,051 INFO L87 Difference]: Start difference. First operand 14892 states and 27544 transitions. cyclomatic complexity: 12653 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:23,176 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:23,176 INFO L93 Difference]: Finished difference Result 14892 states and 27540 transitions. [2022-12-13 12:38:23,177 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14892 states and 27540 transitions. [2022-12-13 12:38:23,233 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:23,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14892 states to 14892 states and 27540 transitions. [2022-12-13 12:38:23,270 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14892 [2022-12-13 12:38:23,280 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14892 [2022-12-13 12:38:23,280 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14892 states and 27540 transitions. [2022-12-13 12:38:23,289 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:23,289 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27540 transitions. [2022-12-13 12:38:23,296 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14892 states and 27540 transitions. [2022-12-13 12:38:23,408 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14892 to 14892. [2022-12-13 12:38:23,419 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.8493150684931507) internal successors, (27540), 14891 states have internal predecessors, (27540), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:23,447 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27540 transitions. [2022-12-13 12:38:23,447 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27540 transitions. [2022-12-13 12:38:23,447 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:23,448 INFO L428 stractBuchiCegarLoop]: Abstraction has 14892 states and 27540 transitions. [2022-12-13 12:38:23,448 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2022-12-13 12:38:23,448 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27540 transitions. [2022-12-13 12:38:23,487 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:23,488 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:23,488 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:23,491 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:23,492 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:23,492 INFO L748 eck$LassoCheckResult]: Stem: 390121#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 390122#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 391266#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 390770#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 390771#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 390964#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 391797#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 390017#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 390018#L458 assume !(0 == getOrigin_~person#1); 391631#L462 assume !(1 == getOrigin_~person#1); 391752#L466 assume !(2 == getOrigin_~person#1); 391372#L470 assume !(3 == getOrigin_~person#1); 391373#L474 assume !(4 == getOrigin_~person#1); 391588#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 390146#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 390147#L1076 assume !(0 == initPersonOnFloor_~floor#1); 391391#L1103 assume 1 == initPersonOnFloor_~floor#1; 391878#L1104 assume !(0 == initPersonOnFloor_~person#1); 392079#L1107 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 390088#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 390089#L868 assume !(0 == callOnFloor_~floorID#1); 392045#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 390240#L880-2 assume { :end_inline_callOnFloor } true; 392100#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 392099#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 392098#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 392097#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 392096#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 391304#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 391305#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 390858#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 390859#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 392095#L2413 assume !(0 != timeShift_~tmp___9~2#1); 391965#L2504 assume !(1 == ~doorState~0); 391966#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 390627#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 390628#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 391433#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 391862#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 391953#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 391954#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 392093#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 392089#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 389782#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 391611#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 391828#L2232-2 assume !(1 == ~currentHeading~0); 390724#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 389815#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 389816#L2248-5 assume { :end_inline_continueInDirection } true; 391677#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 391430#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 390359#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 390360#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 390430#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 397022#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 397020#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 397016#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 397014#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 397015#L198-2 [2022-12-13 12:38:23,492 INFO L750 eck$LassoCheckResult]: Loop: 397015#L198-2 assume !false; 397828#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 397009#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 397008#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 397003#L206 assume 1 != cleanup_~tmp___0~0#1; 397001#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 397000#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 396999#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 392164#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 392165#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 404537#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 404536#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 404535#L805-26 assume !(0 == isFloorCalling_~floorID#1); 404534#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 404427#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 392147#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 392137#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 401053#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 392133#L2415-2 assume !(0 != ~persons_0~0); 401046#L2415-3 assume !(0 != ~persons_1~0); 401036#L2429-1 assume !(0 != ~persons_2~0); 401031#L2443-1 assume !(0 != ~persons_3~0); 400976#L2457-1 assume !(0 != ~persons_4~0); 400973#L2471-1 assume !(0 != ~persons_5~0); 400970#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 400969#L896-12 assume 0 == isPersonOnFloor_~floor#1; 400938#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 400908#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 400906#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 400904#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 400903#L896-14 assume 0 == isPersonOnFloor_~floor#1; 400897#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 400868#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 400866#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 400867#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 402379#L896-16 assume 0 == isPersonOnFloor_~floor#1; 402373#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 402336#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 402334#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 402332#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 402331#L896-18 assume 0 == isPersonOnFloor_~floor#1; 402300#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 402295#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 402293#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 402294#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 402880#L896-20 assume 0 == isPersonOnFloor_~floor#1; 402851#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 402844#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 402842#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 402843#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 403793#L896-22 assume 0 == isPersonOnFloor_~floor#1; 391219#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 390086#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 390189#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 390813#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 391176#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 392023#L852-41 assume { :end_inline_resetCallOnFloor } true; 398675#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 398660#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 397061#L1635-5 assume { :end_inline_resetFloorButton } true; 397057#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 397056#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 397048#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 397049#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 397845#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 397850#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 397848#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 397843#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 397831#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 397015#L198-2 [2022-12-13 12:38:23,493 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:23,493 INFO L85 PathProgramCache]: Analyzing trace with hash 1925532996, now seen corresponding path program 1 times [2022-12-13 12:38:23,493 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:23,493 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [917443874] [2022-12-13 12:38:23,493 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:23,493 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:23,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:23,566 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:23,566 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:23,566 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [917443874] [2022-12-13 12:38:23,566 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [917443874] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:23,566 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:23,566 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:23,566 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370715448] [2022-12-13 12:38:23,566 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:23,567 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:23,567 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:23,567 INFO L85 PathProgramCache]: Analyzing trace with hash -1249470245, now seen corresponding path program 3 times [2022-12-13 12:38:23,567 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:23,567 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1541070163] [2022-12-13 12:38:23,568 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:23,568 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:23,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:23,673 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:23,673 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:23,673 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1541070163] [2022-12-13 12:38:23,673 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1541070163] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:23,673 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:23,674 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:23,674 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [217843223] [2022-12-13 12:38:23,674 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:23,674 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:23,674 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:23,675 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:23,675 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:23,675 INFO L87 Difference]: Start difference. First operand 14892 states and 27540 transitions. cyclomatic complexity: 12649 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:23,761 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:23,761 INFO L93 Difference]: Finished difference Result 14892 states and 27536 transitions. [2022-12-13 12:38:23,761 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14892 states and 27536 transitions. [2022-12-13 12:38:23,806 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:23,837 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14892 states to 14892 states and 27536 transitions. [2022-12-13 12:38:23,837 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14892 [2022-12-13 12:38:23,846 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14892 [2022-12-13 12:38:23,846 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14892 states and 27536 transitions. [2022-12-13 12:38:23,853 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:23,853 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27536 transitions. [2022-12-13 12:38:23,860 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14892 states and 27536 transitions. [2022-12-13 12:38:23,943 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14892 to 14892. [2022-12-13 12:38:23,953 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.8490464679022294) internal successors, (27536), 14891 states have internal predecessors, (27536), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:23,972 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27536 transitions. [2022-12-13 12:38:23,972 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27536 transitions. [2022-12-13 12:38:23,972 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:23,973 INFO L428 stractBuchiCegarLoop]: Abstraction has 14892 states and 27536 transitions. [2022-12-13 12:38:23,973 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2022-12-13 12:38:23,973 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27536 transitions. [2022-12-13 12:38:24,004 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:24,004 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:24,004 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:24,007 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,007 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,008 INFO L748 eck$LassoCheckResult]: Stem: 419923#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 419924#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 421071#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 420569#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 420570#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 420768#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 421601#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 419814#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 419815#L458 assume !(0 == getOrigin_~person#1); 421430#L462 assume !(1 == getOrigin_~person#1); 421556#L466 assume !(2 == getOrigin_~person#1); 421177#L470 assume !(3 == getOrigin_~person#1); 421178#L474 assume !(4 == getOrigin_~person#1); 421386#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 419948#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 419949#L1076 assume !(0 == initPersonOnFloor_~floor#1); 421196#L1103 assume 1 == initPersonOnFloor_~floor#1; 421685#L1104 assume !(0 == initPersonOnFloor_~person#1); 421889#L1107 assume !(1 == initPersonOnFloor_~person#1); 421267#L1110 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 419888#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 419889#L868 assume !(0 == callOnFloor_~floorID#1); 421850#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 420042#L880-2 assume { :end_inline_callOnFloor } true; 421917#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 421916#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 421915#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 421914#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 421913#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 421111#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 421112#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 420659#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 420660#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 421912#L2413 assume !(0 != timeShift_~tmp___9~2#1); 421770#L2504 assume !(1 == ~doorState~0); 421771#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 420427#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 420428#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 421237#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 421670#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 421760#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 421761#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 421910#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 421902#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 419580#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 421409#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 421637#L2232-2 assume !(1 == ~currentHeading~0); 420523#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 419613#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 419614#L2248-5 assume { :end_inline_continueInDirection } true; 421480#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 421234#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 420161#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 420162#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 426878#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 426883#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 426881#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 426864#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 426861#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 426860#L198-2 [2022-12-13 12:38:24,008 INFO L750 eck$LassoCheckResult]: Loop: 426860#L198-2 assume !false; 426859#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 426858#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 426857#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 426855#L206 assume 1 != cleanup_~tmp___0~0#1; 426853#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 426854#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 428539#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 428536#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 428537#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 434331#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 434330#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 421969#L805-26 assume !(0 == isFloorCalling_~floorID#1); 421968#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 421965#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 421961#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 421951#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 421883#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 420725#L2415-2 assume !(0 != ~persons_0~0); 420024#L2415-3 assume !(0 != ~persons_1~0); 419627#L2429-1 assume !(0 != ~persons_2~0); 419999#L2443-1 assume !(0 != ~persons_3~0); 420897#L2457-1 assume !(0 != ~persons_4~0); 420361#L2471-1 assume !(0 != ~persons_5~0); 420348#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 421037#L896-12 assume 0 == isPersonOnFloor_~floor#1; 420171#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 419607#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 420062#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 421321#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 432919#L896-14 assume 0 == isPersonOnFloor_~floor#1; 432913#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 432884#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 432883#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 420345#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 420346#L896-16 assume 0 == isPersonOnFloor_~floor#1; 421452#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 420240#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 421004#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 421005#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 433754#L896-18 assume 0 == isPersonOnFloor_~floor#1; 433723#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 433712#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 433710#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 433708#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 433707#L896-20 assume 0 == isPersonOnFloor_~floor#1; 433678#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 433665#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 433663#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 433661#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 433660#L896-22 assume 0 == isPersonOnFloor_~floor#1; 433634#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 433624#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 433615#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 433614#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 431452#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 431448#L852-41 assume { :end_inline_resetCallOnFloor } true; 431446#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 431445#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 431438#L1635-5 assume { :end_inline_resetFloorButton } true; 419616#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 431437#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 431436#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 431435#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 426866#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 426871#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 426869#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 426863#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 426862#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 426860#L198-2 [2022-12-13 12:38:24,008 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,008 INFO L85 PathProgramCache]: Analyzing trace with hash -1571744897, now seen corresponding path program 1 times [2022-12-13 12:38:24,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,008 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689677243] [2022-12-13 12:38:24,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,064 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,064 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,064 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1689677243] [2022-12-13 12:38:24,064 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1689677243] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,064 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,064 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:24,064 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1544679940] [2022-12-13 12:38:24,065 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,065 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:24,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,065 INFO L85 PathProgramCache]: Analyzing trace with hash -1249470245, now seen corresponding path program 4 times [2022-12-13 12:38:24,065 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,065 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1144802063] [2022-12-13 12:38:24,065 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,066 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,115 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,115 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,116 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1144802063] [2022-12-13 12:38:24,116 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1144802063] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,116 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,116 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:24,116 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1557310182] [2022-12-13 12:38:24,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,116 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:24,116 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:24,116 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:24,116 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:24,116 INFO L87 Difference]: Start difference. First operand 14892 states and 27536 transitions. cyclomatic complexity: 12645 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:24,197 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:24,197 INFO L93 Difference]: Finished difference Result 14892 states and 27532 transitions. [2022-12-13 12:38:24,197 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14892 states and 27532 transitions. [2022-12-13 12:38:24,240 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:24,270 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14892 states to 14892 states and 27532 transitions. [2022-12-13 12:38:24,271 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14892 [2022-12-13 12:38:24,279 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14892 [2022-12-13 12:38:24,279 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14892 states and 27532 transitions. [2022-12-13 12:38:24,286 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:24,286 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27532 transitions. [2022-12-13 12:38:24,292 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14892 states and 27532 transitions. [2022-12-13 12:38:24,372 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14892 to 14892. [2022-12-13 12:38:24,382 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14892 states, 14892 states have (on average 1.848777867311308) internal successors, (27532), 14891 states have internal predecessors, (27532), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:24,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14892 states to 14892 states and 27532 transitions. [2022-12-13 12:38:24,402 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14892 states and 27532 transitions. [2022-12-13 12:38:24,403 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:24,403 INFO L428 stractBuchiCegarLoop]: Abstraction has 14892 states and 27532 transitions. [2022-12-13 12:38:24,403 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2022-12-13 12:38:24,403 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14892 states and 27532 transitions. [2022-12-13 12:38:24,434 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:24,434 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:24,434 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:24,438 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,438 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,438 INFO L748 eck$LassoCheckResult]: Stem: 449717#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 449718#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 450868#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 450364#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 450365#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 450565#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 451396#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 449613#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 449614#L458 assume !(0 == getOrigin_~person#1); 451230#L462 assume !(1 == getOrigin_~person#1); 451354#L466 assume !(2 == getOrigin_~person#1); 450975#L470 assume !(3 == getOrigin_~person#1); 450976#L474 assume !(4 == getOrigin_~person#1); 451187#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 449742#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 449743#L1076 assume !(0 == initPersonOnFloor_~floor#1); 450996#L1103 assume !(1 == initPersonOnFloor_~floor#1); 449391#L1130 assume !(2 == initPersonOnFloor_~floor#1); 449393#L1157 assume !(3 == initPersonOnFloor_~floor#1); 450758#L1184 assume !(4 == initPersonOnFloor_~floor#1); 449684#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 449685#L868 assume !(0 == callOnFloor_~floorID#1); 451650#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 449836#L880-2 assume { :end_inline_callOnFloor } true; 451719#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 451718#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 451717#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 451716#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 451715#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 450907#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 450908#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 450454#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 450456#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 451713#L2413 assume !(0 != timeShift_~tmp___9~2#1); 451572#L2504 assume !(1 == ~doorState~0); 451573#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 450221#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 450222#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 451038#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 451462#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 451560#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 451561#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 451711#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 451701#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 449378#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 451209#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 451428#L2232-2 assume !(1 == ~currentHeading~0); 450318#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 449411#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 449412#L2248-5 assume { :end_inline_continueInDirection } true; 451278#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 451035#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 449955#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 449956#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 456508#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 456513#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 456511#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 456494#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 456491#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 456490#L198-2 [2022-12-13 12:38:24,438 INFO L750 eck$LassoCheckResult]: Loop: 456490#L198-2 assume !false; 456489#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 456488#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 456486#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 456487#L206 assume 1 != cleanup_~tmp___0~0#1; 458383#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 458381#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 458379#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 458377#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 455695#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 455694#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 455693#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 455692#L805-26 assume !(0 == isFloorCalling_~floorID#1); 455691#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 455687#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 451765#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 451636#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 451637#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 450520#L2415-2 assume !(0 != ~persons_0~0); 449818#L2415-3 assume !(0 != ~persons_1~0); 449425#L2429-1 assume !(0 != ~persons_2~0); 449793#L2443-1 assume !(0 != ~persons_3~0); 463239#L2457-1 assume !(0 != ~persons_4~0); 462360#L2471-1 assume !(0 != ~persons_5~0); 458915#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 458913#L896-12 assume 0 == isPersonOnFloor_~floor#1; 458894#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 458864#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 458862#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 458860#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 458859#L896-14 assume 0 == isPersonOnFloor_~floor#1; 458853#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 458818#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 458816#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 458814#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 458812#L896-16 assume 0 == isPersonOnFloor_~floor#1; 458811#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 458780#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 458778#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 458779#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 459204#L896-18 assume 0 == isPersonOnFloor_~floor#1; 459170#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 459163#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 459161#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 459162#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 459479#L896-20 assume 0 == isPersonOnFloor_~floor#1; 459450#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 459437#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 459435#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 459433#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 459432#L896-22 assume 0 == isPersonOnFloor_~floor#1; 459406#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 459396#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 457138#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 457136#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 457133#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 457134#L852-41 assume { :end_inline_resetCallOnFloor } true; 457719#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 457718#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 450680#L1635-5 assume { :end_inline_resetFloorButton } true; 456547#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 456545#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 456543#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 456544#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 456496#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 456501#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 456499#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 456493#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 456492#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 456490#L198-2 [2022-12-13 12:38:24,439 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,439 INFO L85 PathProgramCache]: Analyzing trace with hash -948566273, now seen corresponding path program 1 times [2022-12-13 12:38:24,439 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,439 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [8166975] [2022-12-13 12:38:24,439 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,439 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,482 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,482 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,482 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [8166975] [2022-12-13 12:38:24,482 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [8166975] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,482 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,482 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:24,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21604950] [2022-12-13 12:38:24,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,483 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:24,483 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,483 INFO L85 PathProgramCache]: Analyzing trace with hash -1249470245, now seen corresponding path program 5 times [2022-12-13 12:38:24,483 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,483 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [65350104] [2022-12-13 12:38:24,483 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,484 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,548 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,549 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [65350104] [2022-12-13 12:38:24,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [65350104] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,549 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,549 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:24,549 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2115270838] [2022-12-13 12:38:24,549 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,549 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:24,550 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:24,550 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:24,550 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:24,550 INFO L87 Difference]: Start difference. First operand 14892 states and 27532 transitions. cyclomatic complexity: 12641 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:24,607 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:24,607 INFO L93 Difference]: Finished difference Result 14871 states and 27498 transitions. [2022-12-13 12:38:24,607 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27498 transitions. [2022-12-13 12:38:24,646 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:24,675 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27498 transitions. [2022-12-13 12:38:24,675 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2022-12-13 12:38:24,683 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2022-12-13 12:38:24,683 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27498 transitions. [2022-12-13 12:38:24,689 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:24,690 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2022-12-13 12:38:24,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27498 transitions. [2022-12-13 12:38:24,768 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2022-12-13 12:38:24,778 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8491022796045995) internal successors, (27498), 14870 states have internal predecessors, (27498), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:24,804 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27498 transitions. [2022-12-13 12:38:24,804 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2022-12-13 12:38:24,805 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:24,806 INFO L428 stractBuchiCegarLoop]: Abstraction has 14871 states and 27498 transitions. [2022-12-13 12:38:24,806 INFO L335 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2022-12-13 12:38:24,806 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27498 transitions. [2022-12-13 12:38:24,845 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:24,845 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:24,845 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:24,849 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,849 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:24,850 INFO L748 eck$LassoCheckResult]: Stem: 479492#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 479493#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 480622#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 480131#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 480132#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 480329#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 481136#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 479387#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 479388#L458 assume !(0 == getOrigin_~person#1); 480981#L462 assume !(1 == getOrigin_~person#1); 481098#L466 assume !(2 == getOrigin_~person#1); 480728#L470 assume !(3 == getOrigin_~person#1); 480729#L474 assume !(4 == getOrigin_~person#1); 480938#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 479517#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 479518#L1076 assume !(0 == initPersonOnFloor_~floor#1); 480747#L1103 assume 1 == initPersonOnFloor_~floor#1; 481216#L1104 assume !(0 == initPersonOnFloor_~person#1); 481407#L1107 assume !(1 == initPersonOnFloor_~person#1); 480818#L1110 assume !(2 == initPersonOnFloor_~person#1); 480819#L1113 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 479459#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 479460#L868 assume !(0 == callOnFloor_~floorID#1); 481378#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 479607#L880-2 assume { :end_inline_callOnFloor } true; 481427#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 481426#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 481425#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 481424#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 481423#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 480662#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 480663#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 480221#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 480223#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 481421#L2413 assume !(0 != timeShift_~tmp___9~2#1); 481299#L2504 assume !(1 == ~doorState~0); 481300#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 479990#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 479991#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 480789#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 481201#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 481289#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 481290#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 481419#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 481414#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 479155#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 480960#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 481165#L2232-2 assume !(1 == ~currentHeading~0); 480087#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 479185#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 479186#L2248-5 assume { :end_inline_continueInDirection } true; 481089#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 480786#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 479726#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 479727#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 481580#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 481585#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 481583#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 481578#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 481577#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 481575#L198-2 [2022-12-13 12:38:24,850 INFO L750 eck$LassoCheckResult]: Loop: 481575#L198-2 assume !false; 481574#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 481573#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 481572#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 481571#L206 assume 1 != cleanup_~tmp___0~0#1; 481569#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 481570#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 484981#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 481564#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 481565#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 493943#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 493942#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 480768#L805-26 assume !(0 == isFloorCalling_~floorID#1); 480769#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 480844#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 480343#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 480344#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 481370#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 485677#L2415-2 assume !(0 != ~persons_0~0); 485668#L2415-3 assume !(0 != ~persons_1~0); 485658#L2429-1 assume !(0 != ~persons_2~0); 485652#L2443-1 assume !(0 != ~persons_3~0); 485559#L2457-1 assume !(0 != ~persons_4~0); 485556#L2471-1 assume !(0 != ~persons_5~0); 485552#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485551#L896-12 assume 0 == isPersonOnFloor_~floor#1; 485519#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485489#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 485487#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 485485#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485484#L896-14 assume 0 == isPersonOnFloor_~floor#1; 485373#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485343#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 485339#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 485337#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485335#L896-16 assume 0 == isPersonOnFloor_~floor#1; 485329#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485292#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 485290#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 485288#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485287#L896-18 assume 0 == isPersonOnFloor_~floor#1; 485256#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485245#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 485243#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 485241#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485240#L896-20 assume 0 == isPersonOnFloor_~floor#1; 485165#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485158#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 485156#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 485154#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 485153#L896-22 assume 0 == isPersonOnFloor_~floor#1; 485111#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 485101#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 485092#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 485091#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 484921#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 484864#L852-41 assume { :end_inline_resetCallOnFloor } true; 484860#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 484853#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 484838#L1635-5 assume { :end_inline_resetFloorButton } true; 484835#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 484834#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 484833#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 484257#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 481646#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 481620#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 481595#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 481594#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 481576#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 481575#L198-2 [2022-12-13 12:38:24,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,850 INFO L85 PathProgramCache]: Analyzing trace with hash 399755519, now seen corresponding path program 1 times [2022-12-13 12:38:24,850 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,850 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [788407811] [2022-12-13 12:38:24,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,864 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,919 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,919 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [788407811] [2022-12-13 12:38:24,919 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [788407811] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,920 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,920 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:24,920 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653213123] [2022-12-13 12:38:24,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,920 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:24,921 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:24,921 INFO L85 PathProgramCache]: Analyzing trace with hash -1739597543, now seen corresponding path program 2 times [2022-12-13 12:38:24,921 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:24,921 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426881653] [2022-12-13 12:38:24,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:24,921 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:24,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:24,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:24,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:24,987 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426881653] [2022-12-13 12:38:24,987 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1426881653] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:24,987 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:24,987 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:24,987 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [715123030] [2022-12-13 12:38:24,987 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:24,987 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:24,987 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:24,987 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:24,988 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:24,988 INFO L87 Difference]: Start difference. First operand 14871 states and 27498 transitions. cyclomatic complexity: 12628 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:25,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:25,072 INFO L93 Difference]: Finished difference Result 14871 states and 27497 transitions. [2022-12-13 12:38:25,072 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27497 transitions. [2022-12-13 12:38:25,129 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:25,166 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27497 transitions. [2022-12-13 12:38:25,166 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2022-12-13 12:38:25,176 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2022-12-13 12:38:25,176 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27497 transitions. [2022-12-13 12:38:25,184 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:25,185 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2022-12-13 12:38:25,191 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27497 transitions. [2022-12-13 12:38:25,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2022-12-13 12:38:25,309 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8490350346311613) internal successors, (27497), 14870 states have internal predecessors, (27497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:25,392 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27497 transitions. [2022-12-13 12:38:25,392 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2022-12-13 12:38:25,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:25,393 INFO L428 stractBuchiCegarLoop]: Abstraction has 14871 states and 27497 transitions. [2022-12-13 12:38:25,393 INFO L335 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2022-12-13 12:38:25,393 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27497 transitions. [2022-12-13 12:38:25,416 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:25,416 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:25,416 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:25,419 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:25,419 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:25,419 INFO L748 eck$LassoCheckResult]: Stem: 509248#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 509249#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 510378#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 509887#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 509888#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 510085#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 510892#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 509143#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 509144#L458 assume !(0 == getOrigin_~person#1); 510737#L462 assume !(1 == getOrigin_~person#1); 510854#L466 assume !(2 == getOrigin_~person#1); 510484#L470 assume !(3 == getOrigin_~person#1); 510485#L474 assume !(4 == getOrigin_~person#1); 510694#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 509273#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 509274#L1076 assume !(0 == initPersonOnFloor_~floor#1); 510503#L1103 assume 1 == initPersonOnFloor_~floor#1; 510972#L1104 assume !(0 == initPersonOnFloor_~person#1); 511163#L1107 assume !(1 == initPersonOnFloor_~person#1); 510574#L1110 assume !(2 == initPersonOnFloor_~person#1); 510575#L1113 assume !(3 == initPersonOnFloor_~person#1); 510589#L1116 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 509215#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 509216#L868 assume !(0 == callOnFloor_~floorID#1); 511134#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 509363#L880-2 assume { :end_inline_callOnFloor } true; 511183#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 511182#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 511181#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 511180#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 511179#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 510418#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 510419#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 509977#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 509979#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 511177#L2413 assume !(0 != timeShift_~tmp___9~2#1); 511055#L2504 assume !(1 == ~doorState~0); 511056#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 509746#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 509747#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 510545#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 510957#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 511045#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 511046#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 511175#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 511170#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 508911#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 510716#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 510921#L2232-2 assume !(1 == ~currentHeading~0); 509843#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 508941#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 508942#L2248-5 assume { :end_inline_continueInDirection } true; 510845#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 510542#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 509482#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 509483#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 511336#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 511341#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 511339#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 511334#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 511332#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 511331#L198-2 [2022-12-13 12:38:25,419 INFO L750 eck$LassoCheckResult]: Loop: 511331#L198-2 assume !false; 511330#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 511329#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 511328#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 511327#L206 assume 1 != cleanup_~tmp___0~0#1; 511325#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 511326#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 514737#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 511320#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 511321#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 523699#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 523698#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 510524#L805-26 assume !(0 == isFloorCalling_~floorID#1); 510525#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 510600#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 510099#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 510100#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 511126#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 515433#L2415-2 assume !(0 != ~persons_0~0); 515424#L2415-3 assume !(0 != ~persons_1~0); 515414#L2429-1 assume !(0 != ~persons_2~0); 515408#L2443-1 assume !(0 != ~persons_3~0); 515315#L2457-1 assume !(0 != ~persons_4~0); 515312#L2471-1 assume !(0 != ~persons_5~0); 515308#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 515307#L896-12 assume 0 == isPersonOnFloor_~floor#1; 515275#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 515245#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 515243#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 515241#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 515240#L896-14 assume 0 == isPersonOnFloor_~floor#1; 515129#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 515099#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 515095#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 515093#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 515091#L896-16 assume 0 == isPersonOnFloor_~floor#1; 515085#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 515048#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 515046#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 515044#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 515043#L896-18 assume 0 == isPersonOnFloor_~floor#1; 515012#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 515001#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 514999#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 514997#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 514996#L896-20 assume 0 == isPersonOnFloor_~floor#1; 514921#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 514914#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 514912#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 514910#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 514909#L896-22 assume 0 == isPersonOnFloor_~floor#1; 514867#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 514857#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 514848#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 514847#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 514677#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 514620#L852-41 assume { :end_inline_resetCallOnFloor } true; 514616#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 514609#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 514594#L1635-5 assume { :end_inline_resetFloorButton } true; 514591#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 514590#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 514589#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 514013#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 511402#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 511376#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 511351#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 511350#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 511333#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 511331#L198-2 [2022-12-13 12:38:25,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:25,420 INFO L85 PathProgramCache]: Analyzing trace with hash 104691674, now seen corresponding path program 1 times [2022-12-13 12:38:25,420 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:25,420 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [18858433] [2022-12-13 12:38:25,420 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:25,420 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:25,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:25,456 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:25,456 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:25,456 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [18858433] [2022-12-13 12:38:25,456 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [18858433] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:25,456 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:25,456 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:25,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [124334266] [2022-12-13 12:38:25,456 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:25,456 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:25,457 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:25,457 INFO L85 PathProgramCache]: Analyzing trace with hash -1739597543, now seen corresponding path program 3 times [2022-12-13 12:38:25,457 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:25,457 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [694876428] [2022-12-13 12:38:25,457 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:25,457 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:25,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:25,505 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:25,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:25,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [694876428] [2022-12-13 12:38:25,505 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [694876428] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:25,505 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:25,505 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:25,505 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1891765348] [2022-12-13 12:38:25,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:25,506 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:25,506 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:25,506 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:25,506 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:25,506 INFO L87 Difference]: Start difference. First operand 14871 states and 27497 transitions. cyclomatic complexity: 12627 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:25,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:25,571 INFO L93 Difference]: Finished difference Result 14871 states and 27496 transitions. [2022-12-13 12:38:25,571 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27496 transitions. [2022-12-13 12:38:25,613 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:25,644 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27496 transitions. [2022-12-13 12:38:25,644 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2022-12-13 12:38:25,652 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2022-12-13 12:38:25,652 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27496 transitions. [2022-12-13 12:38:25,659 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:25,659 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2022-12-13 12:38:25,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27496 transitions. [2022-12-13 12:38:25,747 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2022-12-13 12:38:25,757 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.848967789657723) internal successors, (27496), 14870 states have internal predecessors, (27496), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:25,779 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27496 transitions. [2022-12-13 12:38:25,779 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2022-12-13 12:38:25,779 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-12-13 12:38:25,780 INFO L428 stractBuchiCegarLoop]: Abstraction has 14871 states and 27496 transitions. [2022-12-13 12:38:25,780 INFO L335 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2022-12-13 12:38:25,780 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27496 transitions. [2022-12-13 12:38:25,810 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:25,810 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:25,810 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:25,813 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:25,813 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:25,813 INFO L748 eck$LassoCheckResult]: Stem: 539004#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 539005#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 540144#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 539646#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 539647#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 539845#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 540679#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 538901#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 538902#L458 assume !(0 == getOrigin_~person#1); 540516#L462 assume !(1 == getOrigin_~person#1); 540641#L466 assume !(2 == getOrigin_~person#1); 540250#L470 assume !(3 == getOrigin_~person#1); 540251#L474 assume !(4 == getOrigin_~person#1); 540471#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 539029#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 539030#L1076 assume !(0 == initPersonOnFloor_~floor#1); 540269#L1103 assume 1 == initPersonOnFloor_~floor#1; 540765#L1104 assume !(0 == initPersonOnFloor_~person#1); 540972#L1107 assume !(1 == initPersonOnFloor_~person#1); 540342#L1110 assume !(2 == initPersonOnFloor_~person#1); 540343#L1113 assume !(3 == initPersonOnFloor_~person#1); 540359#L1116 assume !(4 == initPersonOnFloor_~person#1); 540046#L1119 assume !(5 == initPersonOnFloor_~person#1); 538973#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 538974#L868 assume !(0 == callOnFloor_~floorID#1); 540932#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 539119#L880-2 assume { :end_inline_callOnFloor } true; 541006#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 541005#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 541004#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 541003#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 541002#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 540185#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 540186#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 539736#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 539738#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 541000#L2413 assume !(0 != timeShift_~tmp___9~2#1); 540850#L2504 assume !(1 == ~doorState~0); 540851#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 539504#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 539505#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 540312#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 540746#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 540839#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 540840#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 540998#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 540984#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 538667#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 540497#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 540712#L2232-2 assume !(1 == ~currentHeading~0); 539599#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 538697#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 538698#L2248-5 assume { :end_inline_continueInDirection } true; 540566#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 540307#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 539239#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 539240#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 540866#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 539778#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 539779#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 539624#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 547304#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 541156#L198-2 [2022-12-13 12:38:25,813 INFO L750 eck$LassoCheckResult]: Loop: 541156#L198-2 assume !false; 541154#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 541152#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 541139#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 541014#L206 assume 1 != cleanup_~tmp___0~0#1; 541013#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 541012#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 541011#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 541009#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 538956#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 538957#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 539973#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 539974#L805-26 assume !(0 == isFloorCalling_~floorID#1); 540588#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 540369#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 540370#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 540921#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 540922#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 539803#L2415-2 assume !(0 != ~persons_0~0); 539101#L2415-3 assume !(0 != ~persons_1~0); 538711#L2429-1 assume !(0 != ~persons_2~0); 539076#L2443-1 assume !(0 != ~persons_3~0); 539970#L2457-1 assume !(0 != ~persons_4~0); 539437#L2471-1 assume !(0 != ~persons_5~0); 539425#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 540108#L896-12 assume 0 == isPersonOnFloor_~floor#1; 539249#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 538691#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 551321#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 551322#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 552101#L896-14 assume 0 == isPersonOnFloor_~floor#1; 552095#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 552060#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 552059#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 552057#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 552056#L896-16 assume 0 == isPersonOnFloor_~floor#1; 552051#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 552020#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 552019#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 540784#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 540785#L896-18 assume 0 == isPersonOnFloor_~floor#1; 539667#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 538708#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 539823#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 539555#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 539352#L896-20 assume 0 == isPersonOnFloor_~floor#1; 539353#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 538968#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 539141#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 539142#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 552657#L896-22 assume 0 == isPersonOnFloor_~floor#1; 552631#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 552621#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 552613#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 552612#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 550301#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 550297#L852-41 assume { :end_inline_resetCallOnFloor } true; 550295#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 550294#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 550189#L1635-5 assume { :end_inline_resetFloorButton } true; 538700#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 550184#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 550182#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 550180#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 550178#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 549282#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 547524#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 547468#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 547305#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 541156#L198-2 [2022-12-13 12:38:25,813 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:25,814 INFO L85 PathProgramCache]: Analyzing trace with hash 1188772472, now seen corresponding path program 1 times [2022-12-13 12:38:25,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:25,814 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [427419641] [2022-12-13 12:38:25,814 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:25,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:25,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:25,846 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:25,847 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:25,847 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [427419641] [2022-12-13 12:38:25,847 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [427419641] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:25,847 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:25,847 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:25,847 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2058394741] [2022-12-13 12:38:25,847 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:25,847 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:25,848 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:25,848 INFO L85 PathProgramCache]: Analyzing trace with hash -1739597543, now seen corresponding path program 4 times [2022-12-13 12:38:25,848 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:25,848 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701584199] [2022-12-13 12:38:25,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:25,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:25,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:25,907 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:25,907 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:25,907 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [701584199] [2022-12-13 12:38:25,907 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [701584199] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:25,907 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:25,907 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:25,907 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1872473391] [2022-12-13 12:38:25,907 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:25,908 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:25,908 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:25,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:38:25,908 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:38:25,908 INFO L87 Difference]: Start difference. First operand 14871 states and 27496 transitions. cyclomatic complexity: 12626 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:25,950 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:25,950 INFO L93 Difference]: Finished difference Result 14871 states and 27495 transitions. [2022-12-13 12:38:25,950 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 14871 states and 27495 transitions. [2022-12-13 12:38:25,988 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:26,016 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 14871 states to 14871 states and 27495 transitions. [2022-12-13 12:38:26,016 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 14871 [2022-12-13 12:38:26,024 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 14871 [2022-12-13 12:38:26,024 INFO L73 IsDeterministic]: Start isDeterministic. Operand 14871 states and 27495 transitions. [2022-12-13 12:38:26,031 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:26,031 INFO L218 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2022-12-13 12:38:26,037 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14871 states and 27495 transitions. [2022-12-13 12:38:26,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14871 to 14871. [2022-12-13 12:38:26,122 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 14871 states, 14871 states have (on average 1.8489005446842848) internal successors, (27495), 14870 states have internal predecessors, (27495), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:26,143 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14871 states to 14871 states and 27495 transitions. [2022-12-13 12:38:26,143 INFO L240 hiAutomatonCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2022-12-13 12:38:26,143 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:38:26,143 INFO L428 stractBuchiCegarLoop]: Abstraction has 14871 states and 27495 transitions. [2022-12-13 12:38:26,144 INFO L335 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2022-12-13 12:38:26,144 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14871 states and 27495 transitions. [2022-12-13 12:38:26,174 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11816 [2022-12-13 12:38:26,174 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:26,174 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:26,177 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:26,177 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:26,177 INFO L748 eck$LassoCheckResult]: Stem: 568754#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 568755#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 569882#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 569392#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 569393#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 569587#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 570390#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 568653#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 568654#L458 assume !(0 == getOrigin_~person#1); 570234#L462 assume !(1 == getOrigin_~person#1); 570352#L466 assume !(2 == getOrigin_~person#1); 569982#L470 assume !(3 == getOrigin_~person#1); 569983#L474 assume !(4 == getOrigin_~person#1); 570192#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 568779#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 568780#L1076 assume !(0 == initPersonOnFloor_~floor#1); 570001#L1103 assume 1 == initPersonOnFloor_~floor#1; 570468#L1104 assume !(0 == initPersonOnFloor_~person#1); 570647#L1107 assume !(1 == initPersonOnFloor_~person#1); 570072#L1110 assume !(2 == initPersonOnFloor_~person#1); 570073#L1113 assume !(3 == initPersonOnFloor_~person#1); 570088#L1116 assume !(4 == initPersonOnFloor_~person#1); 569789#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 568723#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 568724#L868 assume !(0 == callOnFloor_~floorID#1); 570622#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 568869#L880-2 assume { :end_inline_callOnFloor } true; 570664#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 570663#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 570662#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 570661#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 570660#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 569920#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 569921#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 569481#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 569482#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 570659#L2413 assume !(0 != timeShift_~tmp___9~2#1); 570551#L2504 assume !(1 == ~doorState~0); 570552#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 569250#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 569251#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 570043#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 570451#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 570540#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 570541#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 570657#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 570654#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 568420#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 570214#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 570418#L2232-2 assume !(1 == ~currentHeading~0); 569347#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 568452#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 568453#L2248-5 assume { :end_inline_continueInDirection } true; 570342#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 570674#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 568988#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 568989#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 570773#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 570778#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 570776#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 570771#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 570768#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 570769#L198-2 [2022-12-13 12:38:26,177 INFO L750 eck$LassoCheckResult]: Loop: 570769#L198-2 assume !false; 577303#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 577302#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 577301#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 577300#L206 assume 1 != cleanup_~tmp___0~0#1; 577299#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 577298#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 577297#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 570756#L1760 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 570757#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 577905#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 577904#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 577903#L805-26 assume !(0 == isFloorCalling_~floorID#1); 577902#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 577898#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 577897#L2265-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~5#1;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 577890#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 576856#L2413-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 576853#L2415-2 assume !(0 != ~persons_0~0); 576848#L2415-3 assume !(0 != ~persons_1~0); 576838#L2429-1 assume !(0 != ~persons_2~0); 576833#L2443-1 assume !(0 != ~persons_3~0); 576814#L2457-1 assume !(0 != ~persons_4~0); 576812#L2471-1 assume !(0 != ~persons_5~0); 576809#L2485-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret46#1, processWaitingOnFloor_#t~ret47#1, processWaitingOnFloor_#t~ret48#1, processWaitingOnFloor_#t~ret49#1, processWaitingOnFloor_#t~ret50#1, processWaitingOnFloor_#t~ret51#1, processWaitingOnFloor_#t~ret52#1, processWaitingOnFloor_#t~ret53#1, processWaitingOnFloor_#t~ret54#1, processWaitingOnFloor_#t~ret55#1, processWaitingOnFloor_#t~ret56#1, processWaitingOnFloor_#t~ret57#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~16#1, processWaitingOnFloor_~tmp___0~6#1, processWaitingOnFloor_~tmp___1~4#1, processWaitingOnFloor_~tmp___2~4#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~16#1;havoc processWaitingOnFloor_~tmp___0~6#1;havoc processWaitingOnFloor_~tmp___1~4#1;havoc processWaitingOnFloor_~tmp___2~4#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 576808#L896-12 assume 0 == isPersonOnFloor_~floor#1; 576792#L897-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 576762#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret46#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~6#1 := processWaitingOnFloor_#t~ret46#1;havoc processWaitingOnFloor_#t~ret46#1; 576760#L2315-3 assume !(0 != processWaitingOnFloor_~tmp___0~6#1); 576758#L2315-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 576757#L896-14 assume 0 == isPersonOnFloor_~floor#1; 576751#L897-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 576722#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret48#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~4#1 := processWaitingOnFloor_#t~ret48#1;havoc processWaitingOnFloor_#t~ret48#1; 576720#L2328-3 assume !(0 != processWaitingOnFloor_~tmp___2~4#1); 576721#L2328-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 577054#L896-16 assume 0 == isPersonOnFloor_~floor#1; 577053#L897-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 577022#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret50#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret50#1;havoc processWaitingOnFloor_#t~ret50#1; 577020#L2341-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 577021#L2341-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 577474#L896-18 assume 0 == isPersonOnFloor_~floor#1; 577146#L897-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 575430#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret52#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret52#1;havoc processWaitingOnFloor_#t~ret52#1; 575428#L2354-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 575429#L2354-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 575646#L896-20 assume 0 == isPersonOnFloor_~floor#1; 575617#L897-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 575610#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret54#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret54#1;havoc processWaitingOnFloor_#t~ret54#1; 575608#L2367-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 575609#L2367-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~6#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~6#1; 577395#L896-22 assume 0 == isPersonOnFloor_~floor#1; 577231#L897-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~6#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~6#1; 577215#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret56#1 := isPersonOnFloor_#res#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret56#1;havoc processWaitingOnFloor_#t~ret56#1; 577203#L2380-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 577196#L2380-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 574129#L840-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 574116#L852-41 assume { :end_inline_resetCallOnFloor } true; 574110#processWaitingOnFloor_returnLabel#2 assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 574102#L1623-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 574087#L1635-5 assume { :end_inline_resetFloorButton } true; 574084#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 574083#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 574082#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 572396#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 570836#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 570838#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 577306#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 577305#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 577304#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 570769#L198-2 [2022-12-13 12:38:26,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:26,178 INFO L85 PathProgramCache]: Analyzing trace with hash -1734387526, now seen corresponding path program 1 times [2022-12-13 12:38:26,178 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:26,178 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1986322847] [2022-12-13 12:38:26,178 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:26,178 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:26,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:26,201 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:26,201 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:26,201 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1986322847] [2022-12-13 12:38:26,201 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1986322847] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:26,201 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:26,201 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-12-13 12:38:26,201 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [923078257] [2022-12-13 12:38:26,201 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:26,201 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:26,202 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:26,202 INFO L85 PathProgramCache]: Analyzing trace with hash -1739597543, now seen corresponding path program 5 times [2022-12-13 12:38:26,202 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:26,202 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1235121464] [2022-12-13 12:38:26,202 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:26,202 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:26,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:26,243 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:26,243 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:26,243 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1235121464] [2022-12-13 12:38:26,243 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1235121464] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:26,243 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:26,243 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:26,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [255483593] [2022-12-13 12:38:26,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:26,244 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:26,244 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:26,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:38:26,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:38:26,244 INFO L87 Difference]: Start difference. First operand 14871 states and 27495 transitions. cyclomatic complexity: 12625 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 2 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:26,308 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:26,309 INFO L93 Difference]: Finished difference Result 15094 states and 27836 transitions. [2022-12-13 12:38:26,309 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15094 states and 27836 transitions. [2022-12-13 12:38:26,348 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12039 [2022-12-13 12:38:26,376 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15094 states to 15094 states and 27836 transitions. [2022-12-13 12:38:26,377 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15094 [2022-12-13 12:38:26,385 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15094 [2022-12-13 12:38:26,385 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15094 states and 27836 transitions. [2022-12-13 12:38:26,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:26,392 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15094 states and 27836 transitions. [2022-12-13 12:38:26,398 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15094 states and 27836 transitions. [2022-12-13 12:38:26,475 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15094 to 15063. [2022-12-13 12:38:26,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15063 states, 15063 states have (on average 1.8458474407488548) internal successors, (27804), 15062 states have internal predecessors, (27804), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:26,507 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15063 states to 15063 states and 27804 transitions. [2022-12-13 12:38:26,507 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15063 states and 27804 transitions. [2022-12-13 12:38:26,507 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:38:26,507 INFO L428 stractBuchiCegarLoop]: Abstraction has 15063 states and 27804 transitions. [2022-12-13 12:38:26,507 INFO L335 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2022-12-13 12:38:26,507 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15063 states and 27804 transitions. [2022-12-13 12:38:26,540 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12008 [2022-12-13 12:38:26,540 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:26,540 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:26,543 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:26,543 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:26,544 INFO L748 eck$LassoCheckResult]: Stem: 598735#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 598736#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 599880#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 599381#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 599382#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 599576#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 600406#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 598630#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 598631#L458 assume !(0 == getOrigin_~person#1); 600238#L462 assume !(1 == getOrigin_~person#1); 600365#L466 assume !(2 == getOrigin_~person#1); 599988#L470 assume !(3 == getOrigin_~person#1); 599989#L474 assume !(4 == getOrigin_~person#1); 600194#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 598760#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 598761#L1076 assume !(0 == initPersonOnFloor_~floor#1); 600007#L1103 assume 1 == initPersonOnFloor_~floor#1; 600493#L1104 assume !(0 == initPersonOnFloor_~person#1); 600705#L1107 assume !(1 == initPersonOnFloor_~person#1); 600077#L1110 assume !(2 == initPersonOnFloor_~person#1); 600078#L1113 assume !(3 == initPersonOnFloor_~person#1); 600092#L1116 assume !(4 == initPersonOnFloor_~person#1); 599784#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 598701#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 598702#L868 assume !(0 == callOnFloor_~floorID#1); 600669#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 598850#L880-2 assume { :end_inline_callOnFloor } true; 600729#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 600728#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 600727#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 600726#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 600725#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 599919#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 599920#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 599469#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 599470#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 600724#L2413 assume !(0 != timeShift_~tmp___9~2#1); 600586#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 600587#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 599235#L1856 assume !(1 == stopRequestedInDirection_~dir#1); 599236#L2025 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 600046#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 600476#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 600576#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 600577#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 600722#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 600716#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 598396#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 600217#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 600442#L2232-2 assume !(1 == ~currentHeading~0); 599334#L2242-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 598428#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 598429#L2248-5 assume { :end_inline_continueInDirection } true; 600291#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 600043#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 598971#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 598972#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 601908#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 601913#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 601911#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 601883#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 601879#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 601875#L198-2 [2022-12-13 12:38:26,544 INFO L750 eck$LassoCheckResult]: Loop: 601875#L198-2 assume !false; 601590#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 601585#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 601579#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 601573#L206 assume 1 != cleanup_~tmp___0~0#1; 601567#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601485#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601481#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 601250#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 601252#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601709#L805-22 assume !(0 == isFloorCalling_~floorID#1); 601692#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601683#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 601645#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 601615#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 601612#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 601609#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601601#L805-26 assume !(0 == isFloorCalling_~floorID#1); 601602#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 611176#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 611175#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 611174#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 611173#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 611169#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 611167#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 611166#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 609961#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 601351#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 601349#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 601347#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 601348#L2025-2 assume !(0 == ~currentFloorID~0); 600841#L2031-2 assume ~currentFloorID~0 > 0; 600839#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 600840#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601449#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 600778#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 600756#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 601788#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 601787#L2232-3 assume !(1 == ~currentHeading~0); 601776#L2242-9 assume !(0 == ~currentFloorID~0); 601742#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 601731#L2248-7 assume { :end_inline_continueInDirection } true; 601728#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 601726#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 601725#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 601724#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 601723#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 601720#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 601710#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 601708#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 601707#L198-2 assume !false; 601706#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 601705#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 601704#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 601703#L206 assume 1 != cleanup_~tmp___0~0#1; 601702#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601701#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601700#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 601698#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 601697#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601696#L805-22 assume !(0 == isFloorCalling_~floorID#1); 601676#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601675#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 601634#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 601614#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 601611#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 601604#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 601605#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 601603#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 601600#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 601589#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 601584#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 601577#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 601572#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 601564#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 601566#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 600602#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 600605#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 600662#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 599721#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 600125#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 600466#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 600567#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 602294#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 601985#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 600441#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 601977#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 601974#L2232-5 assume !(1 == ~currentHeading~0); 601953#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 601951#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 601950#L2248-11 assume { :end_inline_continueInDirection } true; 601947#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 601946#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 601945#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 601940#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 601918#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 601923#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 601921#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 601884#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 601880#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 601875#L198-2 [2022-12-13 12:38:26,544 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:26,544 INFO L85 PathProgramCache]: Analyzing trace with hash -1874936136, now seen corresponding path program 1 times [2022-12-13 12:38:26,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:26,544 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1432275747] [2022-12-13 12:38:26,544 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:26,544 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:26,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:26,575 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:26,576 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:26,576 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1432275747] [2022-12-13 12:38:26,576 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1432275747] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:26,576 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:26,576 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:26,576 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574144196] [2022-12-13 12:38:26,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:26,576 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:26,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:26,577 INFO L85 PathProgramCache]: Analyzing trace with hash 1133493402, now seen corresponding path program 1 times [2022-12-13 12:38:26,577 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:26,577 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1870678100] [2022-12-13 12:38:26,577 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:26,577 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:26,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:26,645 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:38:26,645 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:26,645 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1870678100] [2022-12-13 12:38:26,645 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1870678100] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:26,645 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:26,645 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:26,645 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [414929124] [2022-12-13 12:38:26,645 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:26,646 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:26,646 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:26,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:38:26,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:38:26,646 INFO L87 Difference]: Start difference. First operand 15063 states and 27804 transitions. cyclomatic complexity: 12742 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:26,909 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:26,909 INFO L93 Difference]: Finished difference Result 48711 states and 89937 transitions. [2022-12-13 12:38:26,909 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 48711 states and 89937 transitions. [2022-12-13 12:38:27,064 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45571 [2022-12-13 12:38:27,201 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 48711 states to 48711 states and 89937 transitions. [2022-12-13 12:38:27,202 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 48711 [2022-12-13 12:38:27,237 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 48711 [2022-12-13 12:38:27,237 INFO L73 IsDeterministic]: Start isDeterministic. Operand 48711 states and 89937 transitions. [2022-12-13 12:38:27,268 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:27,269 INFO L218 hiAutomatonCegarLoop]: Abstraction has 48711 states and 89937 transitions. [2022-12-13 12:38:27,294 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 48711 states and 89937 transitions. [2022-12-13 12:38:27,571 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 48711 to 26806. [2022-12-13 12:38:27,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26806 states, 26806 states have (on average 1.844325897187197) internal successors, (49439), 26805 states have internal predecessors, (49439), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:27,749 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26806 states to 26806 states and 49439 transitions. [2022-12-13 12:38:27,749 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26806 states and 49439 transitions. [2022-12-13 12:38:27,750 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:38:27,750 INFO L428 stractBuchiCegarLoop]: Abstraction has 26806 states and 49439 transitions. [2022-12-13 12:38:27,750 INFO L335 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2022-12-13 12:38:27,750 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26806 states and 49439 transitions. [2022-12-13 12:38:27,801 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23727 [2022-12-13 12:38:27,801 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:27,802 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:27,807 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:27,807 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:27,807 INFO L748 eck$LassoCheckResult]: Stem: 662526#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 662527#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 663680#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 663170#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 663171#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 663371#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 664250#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 662417#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 662418#L458 assume !(0 == getOrigin_~person#1); 664072#L462 assume !(1 == getOrigin_~person#1); 664204#L466 assume !(2 == getOrigin_~person#1); 663798#L470 assume !(3 == getOrigin_~person#1); 663799#L474 assume !(4 == getOrigin_~person#1); 664023#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 662551#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 662552#L1076 assume !(0 == initPersonOnFloor_~floor#1); 663818#L1103 assume 1 == initPersonOnFloor_~floor#1; 664339#L1104 assume !(0 == initPersonOnFloor_~person#1); 664564#L1107 assume !(1 == initPersonOnFloor_~person#1); 663893#L1110 assume !(2 == initPersonOnFloor_~person#1); 663894#L1113 assume !(3 == initPersonOnFloor_~person#1); 663907#L1116 assume !(4 == initPersonOnFloor_~person#1); 663582#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 662491#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 662492#L868 assume !(0 == callOnFloor_~floorID#1); 664525#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 662641#L880-2 assume { :end_inline_callOnFloor } true; 664594#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 664593#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 664592#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 664591#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 664590#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 663724#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 663725#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 663258#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 663260#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 664588#L2413 assume !(0 != timeShift_~tmp___9~2#1); 664436#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 664437#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 663028#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 663029#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 663860#L1860 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 663861#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 664323#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 664425#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 664426#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 664586#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 664578#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 662184#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 664051#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 664285#L2232-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 664477#isTopFloor_returnLabel#5 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 664486#L2236-6 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 664563#L2242-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 662215#L2248-5 assume { :end_inline_continueInDirection } true; 668649#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 668647#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 662762#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 662763#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 670881#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 670886#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 670884#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 670875#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 670867#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 670859#L198-2 [2022-12-13 12:38:27,807 INFO L750 eck$LassoCheckResult]: Loop: 670859#L198-2 assume !false; 670857#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 670850#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 670849#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 670848#L206 assume 1 != cleanup_~tmp___0~0#1; 670840#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 670828#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 670815#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 670811#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 670807#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 670804#L805-22 assume !(0 == isFloorCalling_~floorID#1); 670796#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 670789#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 668809#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 668779#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 668776#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 668773#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 668555#L805-26 assume !(0 == isFloorCalling_~floorID#1); 668556#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 684923#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 684922#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 684921#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 684920#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 684916#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 684914#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 684913#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 664891#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 664881#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 664874#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 664873#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 664872#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 664868#L1860-2 assume !(0 != stopRequestedInDirection_~tmp~13#1); 664867#L1866-2 assume ~currentFloorID~0 < 0; 664866#L1867-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 664844#L805-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 664833#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret33#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 664817#L1871-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 664812#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 664810#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 664809#L2232-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 664795#isTopFloor_returnLabel#7 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 664785#L2236-9 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 664782#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 664778#L2248-7 assume { :end_inline_continueInDirection } true; 664775#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 664773#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 664771#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 664770#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 664756#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 664748#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 664738#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 664736#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 664734#L198-2 assume !false; 664732#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 664730#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 664728#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 664726#L206 assume 1 != cleanup_~tmp___0~0#1; 664724#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 664722#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 664719#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 664715#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 664712#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 664707#L805-22 assume !(0 == isFloorCalling_~floorID#1); 664699#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 664689#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 664667#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 664648#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 664646#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 664644#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 664641#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 664639#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 664637#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 664635#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 664633#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 664631#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 664628#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 664626#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 664623#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 664621#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 664619#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 664527#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 664528#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 672694#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 668665#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 672664#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 672658#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 672641#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 672636#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 672635#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 672631#L2232-5 assume !(1 == ~currentHeading~0); 672629#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 668670#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 668663#L2248-11 assume { :end_inline_continueInDirection } true; 671691#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 671133#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 671132#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 671131#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 670926#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 670931#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 670929#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 670877#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 670868#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 670859#L198-2 [2022-12-13 12:38:27,808 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:27,808 INFO L85 PathProgramCache]: Analyzing trace with hash 739474664, now seen corresponding path program 1 times [2022-12-13 12:38:27,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:27,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625225244] [2022-12-13 12:38:27,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:27,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:27,820 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:27,865 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:27,865 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:27,865 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625225244] [2022-12-13 12:38:27,865 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625225244] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:27,865 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:27,866 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:27,866 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1759240749] [2022-12-13 12:38:27,866 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:27,866 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:27,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:27,866 INFO L85 PathProgramCache]: Analyzing trace with hash 1707679665, now seen corresponding path program 1 times [2022-12-13 12:38:27,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:27,867 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [570419089] [2022-12-13 12:38:27,867 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:27,867 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:27,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:27,925 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2022-12-13 12:38:27,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:27,925 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [570419089] [2022-12-13 12:38:27,925 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [570419089] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:27,925 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:27,925 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:27,926 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1043411355] [2022-12-13 12:38:27,926 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:27,926 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:27,926 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:27,926 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:27,926 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:27,926 INFO L87 Difference]: Start difference. First operand 26806 states and 49439 transitions. cyclomatic complexity: 22634 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:28,092 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:28,092 INFO L93 Difference]: Finished difference Result 26816 states and 49426 transitions. [2022-12-13 12:38:28,092 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26816 states and 49426 transitions. [2022-12-13 12:38:28,179 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23737 [2022-12-13 12:38:28,240 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26816 states to 26816 states and 49426 transitions. [2022-12-13 12:38:28,240 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26816 [2022-12-13 12:38:28,256 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26816 [2022-12-13 12:38:28,257 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26816 states and 49426 transitions. [2022-12-13 12:38:28,270 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:28,270 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26816 states and 49426 transitions. [2022-12-13 12:38:28,282 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26816 states and 49426 transitions. [2022-12-13 12:38:28,432 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26816 to 26806. [2022-12-13 12:38:28,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26806 states, 26806 states have (on average 1.8432813549205402) internal successors, (49411), 26805 states have internal predecessors, (49411), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:28,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26806 states to 26806 states and 49411 transitions. [2022-12-13 12:38:28,490 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26806 states and 49411 transitions. [2022-12-13 12:38:28,490 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:38:28,491 INFO L428 stractBuchiCegarLoop]: Abstraction has 26806 states and 49411 transitions. [2022-12-13 12:38:28,491 INFO L335 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2022-12-13 12:38:28,491 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26806 states and 49411 transitions. [2022-12-13 12:38:28,555 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23727 [2022-12-13 12:38:28,555 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:28,555 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:28,562 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:28,562 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:28,563 INFO L748 eck$LassoCheckResult]: Stem: 716159#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 716160#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 717305#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 716799#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 716800#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 716998#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 717841#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 716056#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 716057#L458 assume !(0 == getOrigin_~person#1); 717666#L462 assume !(1 == getOrigin_~person#1); 717799#L466 assume !(2 == getOrigin_~person#1); 717412#L470 assume !(3 == getOrigin_~person#1); 717413#L474 assume !(4 == getOrigin_~person#1); 717620#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 716184#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 716185#L1076 assume !(0 == initPersonOnFloor_~floor#1); 717431#L1103 assume 1 == initPersonOnFloor_~floor#1; 717921#L1104 assume !(0 == initPersonOnFloor_~person#1); 718129#L1107 assume !(1 == initPersonOnFloor_~person#1); 717501#L1110 assume !(2 == initPersonOnFloor_~person#1); 717502#L1113 assume !(3 == initPersonOnFloor_~person#1); 717516#L1116 assume !(4 == initPersonOnFloor_~person#1); 717210#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 716128#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 716129#L868 assume !(0 == callOnFloor_~floorID#1); 718092#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 716274#L880-2 assume { :end_inline_callOnFloor } true; 718158#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 718157#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 718156#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 718155#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 718154#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 717344#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 717345#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 716890#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 716892#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 718152#L2413 assume !(0 != timeShift_~tmp___9~2#1); 718005#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 718006#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 716657#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 716658#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 717471#L1860 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 717472#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 717903#L2512 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 717996#L2287 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 717997#getReverseHeading_returnLabel#1 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 718150#L1856-1 assume !(1 == stopRequestedInDirection_~dir#1); 718139#L2025-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 715824#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 717644#L2521 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 717869#L2232-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 718046#isTopFloor_returnLabel#5 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 718057#L2236-6 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 715854#L2242-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 715855#L2248-5 assume { :end_inline_continueInDirection } true; 727926#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 727925#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 727923#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 727921#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 727902#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 727907#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 727905#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 727899#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 727897#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 727896#L198-2 [2022-12-13 12:38:28,563 INFO L750 eck$LassoCheckResult]: Loop: 727896#L198-2 assume !false; 727895#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 727894#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 727893#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 727892#L206 assume 1 != cleanup_~tmp___0~0#1; 727888#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 727292#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 719194#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 718833#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 718208#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 718209#L805-22 assume !(0 == isFloorCalling_~floorID#1); 727141#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 727140#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 719377#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 719368#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 719366#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 719364#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 719353#L805-26 assume !(0 == isFloorCalling_~floorID#1); 719342#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 719334#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 719318#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 719309#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 719260#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 719255#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 719252#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 719250#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 719247#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 719246#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 719244#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 719242#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 718170#L2025-2 assume !(0 == ~currentFloorID~0); 718171#L2031-2 assume ~currentFloorID~0 > 0; 718910#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 718911#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 719145#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 718909#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 717079#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 722724#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 722722#L2232-3 assume !(1 == ~currentHeading~0); 722721#L2242-9 assume !(0 == ~currentFloorID~0); 722714#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 722533#L2248-7 assume { :end_inline_continueInDirection } true; 722529#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 722528#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 722526#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 722524#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 722523#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 721839#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 721829#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 721827#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 721825#L198-2 assume !false; 721823#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 721821#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 721819#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 721817#L206 assume 1 != cleanup_~tmp___0~0#1; 721815#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 721813#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 721812#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 721810#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 721811#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 723086#L805-22 assume !(0 == isFloorCalling_~floorID#1); 723078#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 723076#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 723067#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 723059#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 723058#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 723057#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 723055#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 723056#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 723361#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 723359#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 723357#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 723355#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 723354#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 723351#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 723349#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 723347#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 723346#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 718094#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 718095#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 730866#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 717987#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 717989#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 718001#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 718071#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 716134#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 717533#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 716311#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 717456#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 717086#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 717088#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 718036#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 718037#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 728010#L2248-9 assume { :end_inline_continueInDirection } true; 727938#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 727937#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 727936#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 727935#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 727934#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 727933#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 727910#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 727900#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 727898#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 727896#L198-2 [2022-12-13 12:38:28,563 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:28,564 INFO L85 PathProgramCache]: Analyzing trace with hash 1440539242, now seen corresponding path program 1 times [2022-12-13 12:38:28,564 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:28,564 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [744198418] [2022-12-13 12:38:28,564 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:28,564 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:28,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:28,653 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:28,653 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:28,653 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [744198418] [2022-12-13 12:38:28,653 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [744198418] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:28,653 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:28,653 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:38:28,654 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [371905013] [2022-12-13 12:38:28,654 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:28,654 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:28,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:28,654 INFO L85 PathProgramCache]: Analyzing trace with hash -8263930, now seen corresponding path program 1 times [2022-12-13 12:38:28,654 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:28,654 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [35882651] [2022-12-13 12:38:28,654 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:28,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:28,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:28,719 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:38:28,719 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:28,719 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [35882651] [2022-12-13 12:38:28,719 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [35882651] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:28,719 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:28,720 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:28,720 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1208980323] [2022-12-13 12:38:28,720 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:28,720 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:28,720 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:28,720 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:28,720 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:28,721 INFO L87 Difference]: Start difference. First operand 26806 states and 49411 transitions. cyclomatic complexity: 22606 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:29,349 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:29,349 INFO L93 Difference]: Finished difference Result 74647 states and 137819 transitions. [2022-12-13 12:38:29,349 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 74647 states and 137819 transitions. [2022-12-13 12:38:29,596 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 71373 [2022-12-13 12:38:29,773 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 74647 states to 74647 states and 137819 transitions. [2022-12-13 12:38:29,773 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 74647 [2022-12-13 12:38:29,821 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 74647 [2022-12-13 12:38:29,821 INFO L73 IsDeterministic]: Start isDeterministic. Operand 74647 states and 137819 transitions. [2022-12-13 12:38:29,857 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:29,857 INFO L218 hiAutomatonCegarLoop]: Abstraction has 74647 states and 137819 transitions. [2022-12-13 12:38:29,894 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 74647 states and 137819 transitions. [2022-12-13 12:38:30,350 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 74647 to 30335. [2022-12-13 12:38:30,371 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30335 states, 30335 states have (on average 1.8447997362782265) internal successors, (55962), 30334 states have internal predecessors, (55962), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:30,430 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30335 states to 30335 states and 55962 transitions. [2022-12-13 12:38:30,431 INFO L240 hiAutomatonCegarLoop]: Abstraction has 30335 states and 55962 transitions. [2022-12-13 12:38:30,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 12:38:30,432 INFO L428 stractBuchiCegarLoop]: Abstraction has 30335 states and 55962 transitions. [2022-12-13 12:38:30,432 INFO L335 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2022-12-13 12:38:30,432 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30335 states and 55962 transitions. [2022-12-13 12:38:30,521 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27190 [2022-12-13 12:38:30,521 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:30,521 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:30,528 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:30,528 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:30,528 INFO L748 eck$LassoCheckResult]: Stem: 817638#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 817639#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 818790#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 818283#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 818284#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 818487#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 819334#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 817530#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 817531#L458 assume !(0 == getOrigin_~person#1); 819163#L462 assume !(1 == getOrigin_~person#1); 819293#L466 assume !(2 == getOrigin_~person#1); 818900#L470 assume !(3 == getOrigin_~person#1); 818901#L474 assume !(4 == getOrigin_~person#1); 819116#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 817663#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 817664#L1076 assume !(0 == initPersonOnFloor_~floor#1); 818918#L1103 assume 1 == initPersonOnFloor_~floor#1; 819425#L1104 assume !(0 == initPersonOnFloor_~person#1); 819655#L1107 assume !(1 == initPersonOnFloor_~person#1); 818990#L1110 assume !(2 == initPersonOnFloor_~person#1); 818991#L1113 assume !(3 == initPersonOnFloor_~person#1); 819004#L1116 assume !(4 == initPersonOnFloor_~person#1); 818695#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 817604#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 817605#L868 assume !(0 == callOnFloor_~floorID#1); 819606#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 817753#L880-2 assume { :end_inline_callOnFloor } true; 819689#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 819688#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 819687#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 819686#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 819685#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 818833#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 818834#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 818374#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 818375#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 819684#L2413 assume !(0 != timeShift_~tmp___9~2#1); 819514#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 819515#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 818141#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 818142#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 818959#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 817548#L1866 assume !(~currentFloorID~0 < 0); 817549#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 819418#$Ultimate##2076 assume ~currentFloorID~0 < 1; 818126#L1896 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 818127#$Ultimate##2092 assume ~currentFloorID~0 < 1; 819283#L1912 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 819285#L1913 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 817625#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 819683#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 819680#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 818446#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 818447#L2236 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 818798#L2242-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 819690#L2248-1 assume { :end_inline_continueInDirection } true; 834205#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 834204#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 834203#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 834202#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 819534#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 819345#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 818717#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 818261#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 819558#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 819559#L198-2 [2022-12-13 12:38:30,529 INFO L750 eck$LassoCheckResult]: Loop: 819559#L198-2 assume !false; 841516#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 841515#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 841514#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 841513#L206 assume 1 != cleanup_~tmp___0~0#1; 841512#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 841511#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 841510#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 841508#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 841506#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 841505#L805-22 assume !(0 == isFloorCalling_~floorID#1); 841497#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 841487#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 841481#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 841473#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 841472#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 841471#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 841470#L805-26 assume !(0 == isFloorCalling_~floorID#1); 841469#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 841458#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 841454#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 841447#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 841433#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 841419#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 838103#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 838074#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 829107#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 829094#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 827425#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 827376#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 827377#L2025-2 assume !(0 == ~currentFloorID~0); 827402#L2031-2 assume ~currentFloorID~0 > 0; 827401#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 827398#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 827388#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 827326#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 827306#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 827304#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 827303#L2232-3 assume !(1 == ~currentHeading~0); 827302#L2242-9 assume !(0 == ~currentFloorID~0); 819928#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 827269#L2248-7 assume { :end_inline_continueInDirection } true; 827266#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 827265#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 827264#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 827263#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 827255#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 827248#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 827238#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 827231#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 827229#L198-2 assume !false; 827228#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 827227#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 827226#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 827225#L206 assume 1 != cleanup_~tmp___0~0#1; 827224#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 827223#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 827222#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 827220#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 827218#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 827214#L805-22 assume !(0 == isFloorCalling_~floorID#1); 827209#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 823862#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 823181#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 823172#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 823170#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 823168#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 823165#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 823163#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 823161#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 823159#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 823157#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 823154#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 823152#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 823149#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 823148#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 823146#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 823145#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 819609#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 819610#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 833810#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 833809#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 833744#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 833743#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 819578#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 817612#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 817790#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 817792#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 818943#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 818569#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 818571#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 819545#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 818007#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 818008#L2248-9 assume { :end_inline_continueInDirection } true; 817329#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 841536#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 841535#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 841534#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 841532#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 841528#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 841519#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 841518#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 841517#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 819559#L198-2 [2022-12-13 12:38:30,529 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:30,529 INFO L85 PathProgramCache]: Analyzing trace with hash -1293482042, now seen corresponding path program 1 times [2022-12-13 12:38:30,530 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:30,530 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1701724724] [2022-12-13 12:38:30,530 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:30,530 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:30,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:30,586 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:30,587 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:30,587 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1701724724] [2022-12-13 12:38:30,587 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1701724724] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:30,587 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:30,587 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:30,587 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [636043154] [2022-12-13 12:38:30,587 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:30,588 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:30,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:30,588 INFO L85 PathProgramCache]: Analyzing trace with hash -8263930, now seen corresponding path program 2 times [2022-12-13 12:38:30,588 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:30,588 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [955279790] [2022-12-13 12:38:30,588 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:30,588 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:30,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:30,652 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:38:30,652 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:30,652 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [955279790] [2022-12-13 12:38:30,652 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [955279790] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:30,652 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:30,652 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:30,653 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [115013199] [2022-12-13 12:38:30,653 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:30,653 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:30,653 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:30,653 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:30,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:30,654 INFO L87 Difference]: Start difference. First operand 30335 states and 55962 transitions. cyclomatic complexity: 25629 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:30,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:30,872 INFO L93 Difference]: Finished difference Result 30335 states and 55794 transitions. [2022-12-13 12:38:30,872 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30335 states and 55794 transitions. [2022-12-13 12:38:30,993 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27190 [2022-12-13 12:38:31,080 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30335 states to 30335 states and 55794 transitions. [2022-12-13 12:38:31,080 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30335 [2022-12-13 12:38:31,102 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30335 [2022-12-13 12:38:31,102 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30335 states and 55794 transitions. [2022-12-13 12:38:31,121 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:31,121 INFO L218 hiAutomatonCegarLoop]: Abstraction has 30335 states and 55794 transitions. [2022-12-13 12:38:31,138 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30335 states and 55794 transitions. [2022-12-13 12:38:31,369 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30335 to 30335. [2022-12-13 12:38:31,390 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 30335 states, 30335 states have (on average 1.839261579034119) internal successors, (55794), 30334 states have internal predecessors, (55794), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:31,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 30335 states to 30335 states and 55794 transitions. [2022-12-13 12:38:31,450 INFO L240 hiAutomatonCegarLoop]: Abstraction has 30335 states and 55794 transitions. [2022-12-13 12:38:31,450 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-12-13 12:38:31,451 INFO L428 stractBuchiCegarLoop]: Abstraction has 30335 states and 55794 transitions. [2022-12-13 12:38:31,451 INFO L335 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2022-12-13 12:38:31,451 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 30335 states and 55794 transitions. [2022-12-13 12:38:31,537 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27190 [2022-12-13 12:38:31,537 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:31,537 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:31,544 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:31,544 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:31,544 INFO L748 eck$LassoCheckResult]: Stem: 878323#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 878324#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 879463#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 878964#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 878965#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 879163#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 879992#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 878219#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 878220#L458 assume !(0 == getOrigin_~person#1); 879824#L462 assume !(1 == getOrigin_~person#1); 879951#L466 assume !(2 == getOrigin_~person#1); 879572#L470 assume !(3 == getOrigin_~person#1); 879573#L474 assume !(4 == getOrigin_~person#1); 879782#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 878347#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 878348#L1076 assume !(0 == initPersonOnFloor_~floor#1); 879590#L1103 assume 1 == initPersonOnFloor_~floor#1; 880070#L1104 assume !(0 == initPersonOnFloor_~person#1); 880264#L1107 assume !(1 == initPersonOnFloor_~person#1); 879661#L1110 assume !(2 == initPersonOnFloor_~person#1); 879662#L1113 assume !(3 == initPersonOnFloor_~person#1); 879675#L1116 assume !(4 == initPersonOnFloor_~person#1); 879367#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 878290#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 878291#L868 assume !(0 == callOnFloor_~floorID#1); 880228#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 878438#L880-2 assume { :end_inline_callOnFloor } true; 880294#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 880293#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 880292#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 880291#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 880290#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 879503#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 879504#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 879053#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 879055#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 880288#L2413 assume !(0 != timeShift_~tmp___9~2#1); 880154#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 880155#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 878819#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 878820#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 879628#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 878235#L1866 assume !(~currentFloorID~0 < 0); 878236#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 880063#$Ultimate##2076 assume ~currentFloorID~0 < 1; 878805#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 878241#L805-2 assume !(0 == isFloorCalling_~floorID#1); 878242#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 879063#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 879064#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 878309#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 880287#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 880284#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 879122#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 879123#L2236 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 879471#L2242-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 880295#L2248-1 assume { :end_inline_continueInDirection } true; 881249#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 881248#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 881247#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 881246#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 881232#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 881237#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 881235#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 881230#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 881229#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 881226#L198-2 [2022-12-13 12:38:31,545 INFO L750 eck$LassoCheckResult]: Loop: 881226#L198-2 assume !false; 881224#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 881219#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 881207#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 881201#L206 assume 1 != cleanup_~tmp___0~0#1; 881106#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 881096#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 881047#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 880419#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 880421#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 881803#L805-22 assume !(0 == isFloorCalling_~floorID#1); 881786#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 881783#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 881784#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 888824#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 888823#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 888822#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 881750#L805-26 assume !(0 == isFloorCalling_~floorID#1); 881751#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 907704#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 907703#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 907702#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 907701#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 907697#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 907696#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 907695#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 907643#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 881092#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 881090#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 881088#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 881089#L2025-2 assume !(0 == ~currentFloorID~0); 880019#L2031-2 assume ~currentFloorID~0 > 0; 880020#L2032-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 878914#L805-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 878915#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 879883#L2036-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 879884#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 881097#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 881292#L2232-3 assume !(1 == ~currentHeading~0); 881285#L2242-9 assume !(0 == ~currentFloorID~0); 881278#L2242-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 881275#L2248-7 assume { :end_inline_continueInDirection } true; 881273#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 881272#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 881271#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 881270#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 881269#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 881266#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 881267#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 889047#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 889046#L198-2 assume !false; 889045#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 889044#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 889043#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 889042#L206 assume 1 != cleanup_~tmp___0~0#1; 889041#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 889040#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 889039#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 889038#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 889037#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 889036#L805-22 assume !(0 == isFloorCalling_~floorID#1); 889032#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 889031#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 881772#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 881758#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 881756#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 881753#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 881754#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 888782#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 888775#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 888770#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 888761#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 888756#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 888750#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 888746#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 888739#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 888728#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 888725#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 880230#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 879707#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 879708#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 880046#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 880135#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 888629#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 880210#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 878296#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 878473#L2521-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 878475#L2287-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 879614#getReverseHeading_returnLabel#4 timeShift_#t~ret68#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret68#1;havoc timeShift_#t~ret68#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 879244#L2232-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 879246#isTopFloor_returnLabel#9 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 880216#L2236-12 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 882089#L2242-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 881894#L2248-9 assume { :end_inline_continueInDirection } true; 881890#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 881862#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 881735#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 881733#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 881258#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 881263#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 881261#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 881250#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 881228#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 881226#L198-2 [2022-12-13 12:38:31,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:31,545 INFO L85 PathProgramCache]: Analyzing trace with hash 490847238, now seen corresponding path program 1 times [2022-12-13 12:38:31,545 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:31,546 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086217391] [2022-12-13 12:38:31,546 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:31,546 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:31,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:31,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:31,664 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:31,664 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086217391] [2022-12-13 12:38:31,664 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086217391] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:31,664 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:31,664 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:31,664 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [532193647] [2022-12-13 12:38:31,664 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:31,665 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:31,665 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:31,665 INFO L85 PathProgramCache]: Analyzing trace with hash 481863368, now seen corresponding path program 1 times [2022-12-13 12:38:31,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:31,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1474731489] [2022-12-13 12:38:31,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:31,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:31,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:31,732 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-12-13 12:38:31,732 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:31,732 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1474731489] [2022-12-13 12:38:31,733 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1474731489] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:31,733 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:31,733 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:31,733 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163457830] [2022-12-13 12:38:31,733 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:31,733 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:31,733 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:31,734 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:38:31,734 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:38:31,734 INFO L87 Difference]: Start difference. First operand 30335 states and 55794 transitions. cyclomatic complexity: 25461 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:32,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:32,619 INFO L93 Difference]: Finished difference Result 59592 states and 109152 transitions. [2022-12-13 12:38:32,619 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59592 states and 109152 transitions. [2022-12-13 12:38:32,876 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 56397 [2022-12-13 12:38:33,054 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59592 states to 59592 states and 109152 transitions. [2022-12-13 12:38:33,054 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59592 [2022-12-13 12:38:33,099 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59592 [2022-12-13 12:38:33,099 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59592 states and 109152 transitions. [2022-12-13 12:38:33,137 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:33,137 INFO L218 hiAutomatonCegarLoop]: Abstraction has 59592 states and 109152 transitions. [2022-12-13 12:38:33,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59592 states and 109152 transitions. [2022-12-13 12:38:33,581 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59592 to 31004. [2022-12-13 12:38:33,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31004 states, 31004 states have (on average 1.8349567797703523) internal successors, (56891), 31003 states have internal predecessors, (56891), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:33,645 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31004 states to 31004 states and 56891 transitions. [2022-12-13 12:38:33,645 INFO L240 hiAutomatonCegarLoop]: Abstraction has 31004 states and 56891 transitions. [2022-12-13 12:38:33,646 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-13 12:38:33,646 INFO L428 stractBuchiCegarLoop]: Abstraction has 31004 states and 56891 transitions. [2022-12-13 12:38:33,646 INFO L335 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2022-12-13 12:38:33,646 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 31004 states and 56891 transitions. [2022-12-13 12:38:33,714 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 27886 [2022-12-13 12:38:33,714 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:33,714 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:33,721 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:33,721 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:33,721 INFO L748 eck$LassoCheckResult]: Stem: 968277#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 968278#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 969420#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 968919#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 968920#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 969118#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 969948#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 968175#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 968176#L458 assume !(0 == getOrigin_~person#1); 969783#L462 assume !(1 == getOrigin_~person#1); 969906#L466 assume !(2 == getOrigin_~person#1); 969524#L470 assume !(3 == getOrigin_~person#1); 969525#L474 assume !(4 == getOrigin_~person#1); 969740#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 968301#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 968302#L1076 assume !(0 == initPersonOnFloor_~floor#1); 969542#L1103 assume 1 == initPersonOnFloor_~floor#1; 970025#L1104 assume !(0 == initPersonOnFloor_~person#1); 970230#L1107 assume !(1 == initPersonOnFloor_~person#1); 969612#L1110 assume !(2 == initPersonOnFloor_~person#1); 969613#L1113 assume !(3 == initPersonOnFloor_~person#1); 969627#L1116 assume !(4 == initPersonOnFloor_~person#1); 969324#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 968246#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 968247#L868 assume !(0 == callOnFloor_~floorID#1); 970193#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 968391#L880-2 assume { :end_inline_callOnFloor } true; 970258#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 970257#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 970256#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 970255#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 970254#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 969460#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 969461#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 969008#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 969009#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 970253#L2413 assume !(0 != timeShift_~tmp___9~2#1); 970108#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 970109#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 968777#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 968778#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 969582#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 968192#L1866 assume !(~currentFloorID~0 < 0); 968193#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 970020#$Ultimate##2076 assume ~currentFloorID~0 < 1; 968763#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 968198#L805-2 assume !(0 == isFloorCalling_~floorID#1); 968199#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 969017#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 969018#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 968265#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 970252#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 970250#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 969077#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 969078#L2236 assume !(0 != continueInDirection_~tmp~14#1); 969203#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 969204#L2248-1 assume { :end_inline_continueInDirection } true; 969896#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 970259#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 968514#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 968515#$Ultimate##2557 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 968584#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 968367#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 969052#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 968896#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 969035#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 970151#L198-2 [2022-12-13 12:38:33,721 INFO L750 eck$LassoCheckResult]: Loop: 970151#L198-2 assume !false; 992326#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 992325#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 992324#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 992323#L206 assume 1 != cleanup_~tmp___0~0#1; 992322#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 992321#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 992320#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 992318#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 992319#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 992503#L805-22 assume !(0 == isFloorCalling_~floorID#1); 992875#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 992865#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 992859#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 992851#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 992850#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 992849#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 992848#L805-26 assume !(0 == isFloorCalling_~floorID#1); 992845#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 992840#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 992839#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 992838#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 992833#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 992824#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 992821#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 992724#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 984328#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 984322#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 984316#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 974169#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 974166#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 974159#L1860-2 assume !(0 != stopRequestedInDirection_~tmp~13#1); 974156#L1866-2 assume ~currentFloorID~0 < 0; 974154#L1867-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 974147#L805-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 974140#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret33#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret33#1;havoc stopRequestedInDirection_#t~ret33#1; 974096#L1871-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 974091#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 974089#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 974088#L2232-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 974087#isTopFloor_returnLabel#7 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 974086#L2236-9 assume !(0 != continueInDirection_~tmp~14#1); 974085#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 974083#L2248-7 assume { :end_inline_continueInDirection } true; 974081#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 974080#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 974079#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 974077#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 974078#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 974068#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 974059#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 974058#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 974053#L198-2 assume !false; 974052#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 974038#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 974034#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 974033#L206 assume 1 != cleanup_~tmp___0~0#1; 974032#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 974031#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 974030#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 974028#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 974026#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 974025#L805-22 assume !(0 == isFloorCalling_~floorID#1); 974016#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 974015#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 973990#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 973981#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 973979#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 973977#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 973974#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 973972#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 973970#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 973968#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 973966#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 973963#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 973961#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 973948#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 973947#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 973939#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 973936#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 973935#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 973933#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 973932#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 973931#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 973929#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 973920#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 973921#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 991290#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 991285#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 991283#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 991282#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 969010#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 969011#L2236-15 assume !(0 != continueInDirection_~tmp~14#1); 969170#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 967972#L2248-11 assume { :end_inline_continueInDirection } true; 967973#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 992346#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 992345#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 992344#$Ultimate##5097 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 992330#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 992335#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 992333#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 992328#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 992327#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 970151#L198-2 [2022-12-13 12:38:33,721 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:33,722 INFO L85 PathProgramCache]: Analyzing trace with hash 47948098, now seen corresponding path program 1 times [2022-12-13 12:38:33,722 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:33,722 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [616133176] [2022-12-13 12:38:33,722 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:33,722 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:33,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:33,801 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:33,801 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:33,801 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [616133176] [2022-12-13 12:38:33,801 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [616133176] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:33,802 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:33,802 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:33,802 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1160426299] [2022-12-13 12:38:33,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:33,802 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:33,802 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:33,802 INFO L85 PathProgramCache]: Analyzing trace with hash 1939325093, now seen corresponding path program 1 times [2022-12-13 12:38:33,803 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:33,803 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1537820329] [2022-12-13 12:38:33,803 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:33,803 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:33,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:33,869 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2022-12-13 12:38:33,869 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:33,869 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1537820329] [2022-12-13 12:38:33,869 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1537820329] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:33,869 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:33,869 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:33,869 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1613388572] [2022-12-13 12:38:33,869 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:33,869 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:33,869 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:33,870 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:38:33,870 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:38:33,870 INFO L87 Difference]: Start difference. First operand 31004 states and 56891 transitions. cyclomatic complexity: 25889 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:34,665 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:34,665 INFO L93 Difference]: Finished difference Result 92602 states and 169494 transitions. [2022-12-13 12:38:34,665 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 92602 states and 169494 transitions. [2022-12-13 12:38:34,958 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 89227 [2022-12-13 12:38:35,184 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 92602 states to 92530 states and 169406 transitions. [2022-12-13 12:38:35,184 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 92530 [2022-12-13 12:38:35,243 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 92530 [2022-12-13 12:38:35,243 INFO L73 IsDeterministic]: Start isDeterministic. Operand 92530 states and 169406 transitions. [2022-12-13 12:38:35,286 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:35,286 INFO L218 hiAutomatonCegarLoop]: Abstraction has 92530 states and 169406 transitions. [2022-12-13 12:38:35,330 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 92530 states and 169406 transitions. [2022-12-13 12:38:35,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 92530 to 50485. [2022-12-13 12:38:35,770 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 50485 states, 50485 states have (on average 1.8272358126176091) internal successors, (92248), 50484 states have internal predecessors, (92248), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:35,845 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 50485 states to 50485 states and 92248 transitions. [2022-12-13 12:38:35,845 INFO L240 hiAutomatonCegarLoop]: Abstraction has 50485 states and 92248 transitions. [2022-12-13 12:38:35,846 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-12-13 12:38:35,846 INFO L428 stractBuchiCegarLoop]: Abstraction has 50485 states and 92248 transitions. [2022-12-13 12:38:35,846 INFO L335 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2022-12-13 12:38:35,846 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 50485 states and 92248 transitions. [2022-12-13 12:38:35,984 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 47311 [2022-12-13 12:38:35,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:35,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:35,996 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:35,996 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:35,996 INFO L748 eck$LassoCheckResult]: Stem: 1091913#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1091914#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1093058#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1092548#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1092549#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1092753#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1093596#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1091807#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1091808#L458 assume !(0 == getOrigin_~person#1); 1093433#L462 assume !(1 == getOrigin_~person#1); 1093556#L466 assume !(2 == getOrigin_~person#1); 1093170#L470 assume !(3 == getOrigin_~person#1); 1093171#L474 assume !(4 == getOrigin_~person#1); 1093387#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1091937#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1091938#L1076 assume !(0 == initPersonOnFloor_~floor#1); 1093188#L1103 assume 1 == initPersonOnFloor_~floor#1; 1093684#L1104 assume !(0 == initPersonOnFloor_~person#1); 1093915#L1107 assume !(1 == initPersonOnFloor_~person#1); 1093258#L1110 assume !(2 == initPersonOnFloor_~person#1); 1093259#L1113 assume !(3 == initPersonOnFloor_~person#1); 1093272#L1116 assume !(4 == initPersonOnFloor_~person#1); 1092962#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1091880#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1091881#L868 assume !(0 == callOnFloor_~floorID#1); 1093872#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1092028#L880-2 assume { :end_inline_callOnFloor } true; 1093950#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1093949#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1093948#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1093947#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1093946#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1093097#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1093098#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1092641#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1092643#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1093944#L2413 assume !(0 != timeShift_~tmp___9~2#1); 1093780#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 1093781#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1092408#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1092409#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1093227#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 1091825#L1866 assume !(~currentFloorID~0 < 0); 1091826#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 1093677#$Ultimate##2076 assume ~currentFloorID~0 < 1; 1092393#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1091831#L805-2 assume !(0 == isFloorCalling_~floorID#1); 1091832#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1092650#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 1092651#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1091899#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1093943#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1093940#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1092712#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1092713#L2236 assume !(0 != continueInDirection_~tmp~14#1); 1092837#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1092838#L2248-1 assume { :end_inline_continueInDirection } true; 1093480#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1093225#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1092148#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1092149#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1092214#L611 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1094574#areDoorsOpen_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 1094571#L615 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1094570#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1094568#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1094569#L198-2 [2022-12-13 12:38:35,997 INFO L750 eck$LassoCheckResult]: Loop: 1094569#L198-2 assume !false; 1104667#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1104666#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1104665#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1094554#L206 assume 1 != cleanup_~tmp___0~0#1; 1094552#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1094550#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1094547#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1094548#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1094539#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1094541#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1094526#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1094527#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1094491#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1094484#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1094465#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1094466#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1094457#L805-26 assume !(0 == isFloorCalling_~floorID#1); 1094454#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1094445#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1094441#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1094438#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1094435#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1094426#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1094422#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1094418#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1094415#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1094411#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1094409#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1094408#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1094407#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1094405#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1094404#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1094403#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1094401#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1094400#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1094398#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1094399#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1098235#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1094342#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1098233#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1098234#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1098232#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1098230#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 1098221#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1098219#L2248-11 assume { :end_inline_continueInDirection } true; 1098217#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1094309#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1094310#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1094300#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1094301#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 1094281#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1094215#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1094203#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1094195#L198-2 assume !false; 1094192#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1094177#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1094172#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1094166#L206 assume 1 != cleanup_~tmp___0~0#1; 1094164#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1094154#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1094144#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1094109#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1094106#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1094105#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1094101#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1094088#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1094031#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1094024#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1094005#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1094006#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1093997#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1093993#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1093994#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1093984#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1093985#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1093976#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1093977#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1093967#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1093968#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1093957#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1093958#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 1093876#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1093877#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1111694#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1111692#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1111658#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1111659#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 1111530#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1111523#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1111520#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1098815#L2232-5 assume !(1 == ~currentHeading~0); 1099172#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1098980#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1098893#L2248-11 assume { :end_inline_continueInDirection } true; 1098891#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1104678#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1104677#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1104676#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1104674#L611-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1104675#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret20#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret20#1;havoc __utac_acc__Specification2_spec__3_#t~ret20#1; 1104670#L615-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 1104669#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1104668#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1094569#L198-2 [2022-12-13 12:38:35,997 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:35,997 INFO L85 PathProgramCache]: Analyzing trace with hash -442179200, now seen corresponding path program 1 times [2022-12-13 12:38:35,997 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:35,997 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016402120] [2022-12-13 12:38:35,997 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:35,997 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:36,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:36,030 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-12-13 12:38:36,031 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:36,031 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016402120] [2022-12-13 12:38:36,031 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2016402120] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:36,031 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:36,031 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-12-13 12:38:36,031 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1883450715] [2022-12-13 12:38:36,031 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:36,031 INFO L753 eck$LassoCheckResult]: stem already infeasible [2022-12-13 12:38:36,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:36,032 INFO L85 PathProgramCache]: Analyzing trace with hash 312235164, now seen corresponding path program 1 times [2022-12-13 12:38:36,032 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:36,032 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1501011078] [2022-12-13 12:38:36,032 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:36,032 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:36,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:36,192 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 12:38:36,192 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:36,192 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1501011078] [2022-12-13 12:38:36,193 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1501011078] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:36,193 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:36,193 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:36,193 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [293418212] [2022-12-13 12:38:36,193 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:36,193 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:36,193 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:36,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-12-13 12:38:36,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-12-13 12:38:36,194 INFO L87 Difference]: Start difference. First operand 50485 states and 92248 transitions. cyclomatic complexity: 41765 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:36,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:36,466 INFO L93 Difference]: Finished difference Result 100137 states and 183019 transitions. [2022-12-13 12:38:36,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 100137 states and 183019 transitions. [2022-12-13 12:38:36,826 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 94486 [2022-12-13 12:38:37,074 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 100137 states to 100137 states and 183019 transitions. [2022-12-13 12:38:37,074 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 100137 [2022-12-13 12:38:37,141 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 100137 [2022-12-13 12:38:37,141 INFO L73 IsDeterministic]: Start isDeterministic. Operand 100137 states and 183019 transitions. [2022-12-13 12:38:37,193 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:37,193 INFO L218 hiAutomatonCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2022-12-13 12:38:37,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 100137 states and 183019 transitions. [2022-12-13 12:38:37,837 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 100137 to 100137. [2022-12-13 12:38:37,909 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 100137 states, 100137 states have (on average 1.827686070083985) internal successors, (183019), 100136 states have internal predecessors, (183019), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:38,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 100137 states to 100137 states and 183019 transitions. [2022-12-13 12:38:38,059 INFO L240 hiAutomatonCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2022-12-13 12:38:38,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-12-13 12:38:38,060 INFO L428 stractBuchiCegarLoop]: Abstraction has 100137 states and 183019 transitions. [2022-12-13 12:38:38,060 INFO L335 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2022-12-13 12:38:38,060 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 100137 states and 183019 transitions. [2022-12-13 12:38:38,336 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 94486 [2022-12-13 12:38:38,337 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:38,337 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:38,358 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:38,358 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:38,359 INFO L748 eck$LassoCheckResult]: Stem: 1242544#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1242545#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 1243690#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1243181#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 1243182#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 1243381#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 1244250#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1242438#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 1242439#L458 assume !(0 == getOrigin_~person#1); 1244072#L462 assume !(1 == getOrigin_~person#1); 1244204#L466 assume !(2 == getOrigin_~person#1); 1243802#L470 assume !(3 == getOrigin_~person#1); 1243803#L474 assume !(4 == getOrigin_~person#1); 1244026#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 1242568#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1242569#L1076 assume !(0 == initPersonOnFloor_~floor#1); 1243821#L1103 assume 1 == initPersonOnFloor_~floor#1; 1244338#L1104 assume !(0 == initPersonOnFloor_~person#1); 1244574#L1107 assume !(1 == initPersonOnFloor_~person#1); 1243891#L1110 assume !(2 == initPersonOnFloor_~person#1); 1243892#L1113 assume !(3 == initPersonOnFloor_~person#1); 1243907#L1116 assume !(4 == initPersonOnFloor_~person#1); 1243595#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1242512#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1242513#L868 assume !(0 == callOnFloor_~floorID#1); 1244535#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1242659#L880-2 assume { :end_inline_callOnFloor } true; 1244609#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 1244608#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1244607#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1244606#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1244605#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1243733#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1243734#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1243275#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1243276#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1244604#L2413 assume !(0 != timeShift_~tmp___9~2#1); 1244444#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 1244445#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1243037#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1243038#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1243861#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 1242455#L1866 assume !(~currentFloorID~0 < 0); 1242456#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 1244331#$Ultimate##2076 assume ~currentFloorID~0 < 1; 1243023#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1242461#L805-2 assume !(0 == isFloorCalling_~floorID#1); 1242462#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1243281#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 1243282#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1242531#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1244603#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1244600#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1243340#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1243341#L2236 assume !(0 != continueInDirection_~tmp~14#1); 1243469#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1243470#L2248-1 assume { :end_inline_continueInDirection } true; 1244195#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1245165#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1242777#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1242778#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1242845#L611 assume !(0 != ~floorButtons_spc2_1~0); 1273233#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273232#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273231#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273230#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1273228#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 1273227#L198-2 [2022-12-13 12:38:38,359 INFO L750 eck$LassoCheckResult]: Loop: 1273227#L198-2 assume !false; 1273226#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1273225#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1273224#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1273223#L206 assume 1 != cleanup_~tmp___0~0#1; 1273222#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1273221#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1273216#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1273213#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1273207#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1273205#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1273175#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1273173#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1273059#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1273049#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1273046#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1273043#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1266461#L805-26 assume !(0 == isFloorCalling_~floorID#1); 1266458#L809-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1266453#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1266451#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1266448#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1266446#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1266441#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1266438#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1266436#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1266315#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1265028#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1265026#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1265025#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1265024#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1265022#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1265021#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1265020#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1265015#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1265014#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1265013#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1264425#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 1264416#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1264414#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1264412#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1264411#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 1264410#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 1264409#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 1264408#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1264407#L2248-11 assume { :end_inline_continueInDirection } true; 1264405#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1264404#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1264403#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1264402#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 1264401#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 1264398#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1245349#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1264390#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1264389#L198-2 assume !false; 1264388#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 1264387#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 1264386#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 1264385#L206 assume 1 != cleanup_~tmp___0~0#1; 1264384#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1264383#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1264382#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 1264380#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 1264378#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1264377#L805-22 assume !(0 == isFloorCalling_~floorID#1); 1263875#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1263870#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 1245269#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 1245250#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 1245247#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 1245248#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 1263640#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 1263638#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 1263636#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 1263634#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 1263632#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 1263630#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1263628#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 1263602#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 1245222#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1245220#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1245218#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 1244539#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1244540#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 1305908#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 1305902#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 1305900#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1305886#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 1305778#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 1305738#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 1305731#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 1278100#L2232-5 assume !(1 == ~currentHeading~0); 1305720#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1305716#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1305714#L2248-11 assume { :end_inline_continueInDirection } true; 1305711#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 1305710#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 1305709#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1305708#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1273601#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 1273599#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273597#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273595#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1273590#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1273229#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 1273227#L198-2 [2022-12-13 12:38:38,359 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:38,359 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 1 times [2022-12-13 12:38:38,359 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:38,359 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1709412757] [2022-12-13 12:38:38,359 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:38,359 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:38,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:38:38,369 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:38:38,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:38:38,412 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:38:38,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:38,412 INFO L85 PathProgramCache]: Analyzing trace with hash 1405714417, now seen corresponding path program 1 times [2022-12-13 12:38:38,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:38,413 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1427724602] [2022-12-13 12:38:38,413 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:38,413 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:38,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:38,465 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2022-12-13 12:38:38,466 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:38,466 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1427724602] [2022-12-13 12:38:38,466 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1427724602] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:38,466 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:38,466 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:38:38,466 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [624027544] [2022-12-13 12:38:38,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:38,466 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:38,466 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:38,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:38:38,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:38:38,467 INFO L87 Difference]: Start difference. First operand 100137 states and 183019 transitions. cyclomatic complexity: 82884 Second operand has 7 states, 7 states have (on average 12.571428571428571) internal successors, (88), 7 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:42,436 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:42,436 INFO L93 Difference]: Finished difference Result 740665 states and 1365017 transitions. [2022-12-13 12:38:42,437 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 740665 states and 1365017 transitions. [2022-12-13 12:38:44,931 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 725556 [2022-12-13 12:38:46,847 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 740665 states to 740665 states and 1365017 transitions. [2022-12-13 12:38:46,847 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 740665 [2022-12-13 12:38:47,267 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 740665 [2022-12-13 12:38:47,267 INFO L73 IsDeterministic]: Start isDeterministic. Operand 740665 states and 1365017 transitions. [2022-12-13 12:38:47,636 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:47,636 INFO L218 hiAutomatonCegarLoop]: Abstraction has 740665 states and 1365017 transitions. [2022-12-13 12:38:48,011 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 740665 states and 1365017 transitions. [2022-12-13 12:38:50,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 740665 to 197901. [2022-12-13 12:38:50,761 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 197901 states, 197901 states have (on average 1.8261504489618547) internal successors, (361397), 197900 states have internal predecessors, (361397), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:51,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 197901 states to 197901 states and 361397 transitions. [2022-12-13 12:38:51,075 INFO L240 hiAutomatonCegarLoop]: Abstraction has 197901 states and 361397 transitions. [2022-12-13 12:38:51,075 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-13 12:38:51,076 INFO L428 stractBuchiCegarLoop]: Abstraction has 197901 states and 361397 transitions. [2022-12-13 12:38:51,076 INFO L335 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2022-12-13 12:38:51,076 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 197901 states and 361397 transitions. [2022-12-13 12:38:51,829 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 189244 [2022-12-13 12:38:51,829 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:38:51,829 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:38:51,864 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:51,865 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:38:51,865 INFO L748 eck$LassoCheckResult]: Stem: 2083392#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2083393#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2084552#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2084040#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2084041#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2084246#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2085141#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2083287#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2083288#L458 assume !(0 == getOrigin_~person#1); 2084951#L462 assume !(1 == getOrigin_~person#1); 2085094#L466 assume !(2 == getOrigin_~person#1); 2084671#L470 assume !(3 == getOrigin_~person#1); 2084672#L474 assume !(4 == getOrigin_~person#1); 2084902#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2083417#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2083418#L1076 assume !(0 == initPersonOnFloor_~floor#1); 2084696#L1103 assume 1 == initPersonOnFloor_~floor#1; 2085238#L1104 assume !(0 == initPersonOnFloor_~person#1); 2085481#L1107 assume !(1 == initPersonOnFloor_~person#1); 2084775#L1110 assume !(2 == initPersonOnFloor_~person#1); 2084776#L1113 assume !(3 == initPersonOnFloor_~person#1); 2084791#L1116 assume !(4 == initPersonOnFloor_~person#1); 2084454#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2083359#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2083360#L868 assume !(0 == callOnFloor_~floorID#1); 2085435#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2085506#L880-2 assume { :end_inline_callOnFloor } true; 2084657#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2084658#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2085153#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2085154#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2085519#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2085520#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2084683#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2084684#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2085517#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2085518#L2413 assume !(0 != timeShift_~tmp___9~2#1); 2085337#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 2085338#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2083898#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2083899#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2084739#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 2084740#L1866 assume !(~currentFloorID~0 < 0); 2085230#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 2085231#$Ultimate##2076 assume ~currentFloorID~0 < 1; 2083883#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2083884#L805-2 assume !(0 == isFloorCalling_~floorID#1); 2084930#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2084140#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 2084141#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2085532#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2085533#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2085511#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2085512#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 2084561#L2236 assume !(0 != continueInDirection_~tmp~14#1); 2084562#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2085083#L2248-1 assume { :end_inline_continueInDirection } true; 2085084#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2085930#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2085931#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2083697#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2083698#L611 assume !(0 != ~floorButtons_spc2_1~0); 2139852#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2139851#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2139850#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2139849#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2139847#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2139842#L198-2 [2022-12-13 12:38:51,865 INFO L750 eck$LassoCheckResult]: Loop: 2139842#L198-2 assume !false; 2139779#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2139737#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2139731#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2139726#L206 assume 1 != cleanup_~tmp___0~0#1; 2139605#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2139604#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2139603#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 2139601#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 2139602#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2139821#L805-22 assume !(0 == isFloorCalling_~floorID#1); 2139819#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2139820#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2139810#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2139802#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2139801#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2139800#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2115838#L805-26 assume !(0 == isFloorCalling_~floorID#1); 2115836#L809-26 assume !(1 == isFloorCalling_~floorID#1); 2115831#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2115827#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2115825#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2115823#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 2115821#L1673-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2115813#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2115811#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2115808#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2115806#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 2115791#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2115789#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2115788#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2115787#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2115785#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2115784#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2115783#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2115781#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2115780#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2115779#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2112516#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2112517#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2112437#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 2122968#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2122967#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2122966#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 2122965#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 2122964#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2122963#L2248-11 assume { :end_inline_continueInDirection } true; 2122961#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2122960#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2122959#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2122958#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2086278#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 2086279#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 2091644#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2121406#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2121404#L198-2 assume !false; 2121401#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2121400#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2121399#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2116888#L206 assume 1 != cleanup_~tmp___0~0#1; 2115855#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2086196#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2086197#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 2086192#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 2086189#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2086191#L805-22 assume !(0 == isFloorCalling_~floorID#1); 2086184#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2086185#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2086176#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2086177#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2136392#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2133331#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2133332#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2133322#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2133323#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2133313#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2133314#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2133304#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2133306#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2133299#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 2133298#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2133297#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2133291#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 2085439#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2085440#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2142546#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2142543#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2142541#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2142514#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 2142464#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2142440#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 2140821#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2139520#L2232-5 assume !(1 == ~currentHeading~0); 2084860#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2084861#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2140557#L2248-11 assume { :end_inline_continueInDirection } true; 2140554#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2140551#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2140550#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2140549#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2140548#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 2091936#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2140055#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2140036#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2091920#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2139848#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2139842#L198-2 [2022-12-13 12:38:51,866 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:51,866 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 2 times [2022-12-13 12:38:51,866 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:51,866 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1313372152] [2022-12-13 12:38:51,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:51,866 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:51,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:38:51,878 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:38:51,885 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:38:51,899 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:38:51,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:38:51,900 INFO L85 PathProgramCache]: Analyzing trace with hash -1210750253, now seen corresponding path program 1 times [2022-12-13 12:38:51,900 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:38:51,900 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1403686852] [2022-12-13 12:38:51,900 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:38:51,900 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:38:51,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:38:51,950 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2022-12-13 12:38:51,950 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:38:51,950 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1403686852] [2022-12-13 12:38:51,950 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1403686852] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:38:51,950 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:38:51,950 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-12-13 12:38:51,950 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339472253] [2022-12-13 12:38:51,950 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:38:51,951 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:38:51,951 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:38:51,951 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-12-13 12:38:51,951 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-12-13 12:38:51,951 INFO L87 Difference]: Start difference. First operand 197901 states and 361397 transitions. cyclomatic complexity: 163498 Second operand has 5 states, 5 states have (on average 17.8) internal successors, (89), 5 states have internal predecessors, (89), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:38:54,637 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:38:54,637 INFO L93 Difference]: Finished difference Result 585611 states and 1076603 transitions. [2022-12-13 12:38:54,637 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 585611 states and 1076603 transitions. [2022-12-13 12:38:57,214 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 571734 [2022-12-13 12:38:58,596 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 585611 states to 585611 states and 1076603 transitions. [2022-12-13 12:38:58,596 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 585611 [2022-12-13 12:38:58,890 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 585611 [2022-12-13 12:38:58,890 INFO L73 IsDeterministic]: Start isDeterministic. Operand 585611 states and 1076603 transitions. [2022-12-13 12:38:59,194 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:38:59,194 INFO L218 hiAutomatonCegarLoop]: Abstraction has 585611 states and 1076603 transitions. [2022-12-13 12:38:59,452 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 585611 states and 1076603 transitions. [2022-12-13 12:39:02,295 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 585611 to 295339. [2022-12-13 12:39:02,456 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295339 states, 295339 states have (on average 1.8366656621712676) internal successors, (542439), 295338 states have internal predecessors, (542439), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:03,117 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295339 states to 295339 states and 542439 transitions. [2022-12-13 12:39:03,117 INFO L240 hiAutomatonCegarLoop]: Abstraction has 295339 states and 542439 transitions. [2022-12-13 12:39:03,118 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-12-13 12:39:03,118 INFO L428 stractBuchiCegarLoop]: Abstraction has 295339 states and 542439 transitions. [2022-12-13 12:39:03,119 INFO L335 stractBuchiCegarLoop]: ======== Iteration 30 ============ [2022-12-13 12:39:03,119 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 295339 states and 542439 transitions. [2022-12-13 12:39:03,937 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 286682 [2022-12-13 12:39:03,938 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:39:03,938 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:39:03,972 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:03,972 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:03,972 INFO L748 eck$LassoCheckResult]: Stem: 2866922#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2866923#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 2868096#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 2867572#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 2867573#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 2867782#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 2868664#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 2866818#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 2866819#L458 assume !(0 == getOrigin_~person#1); 2868484#L462 assume !(1 == getOrigin_~person#1); 2868614#L466 assume !(2 == getOrigin_~person#1); 2868208#L470 assume !(3 == getOrigin_~person#1); 2868209#L474 assume !(4 == getOrigin_~person#1); 2868433#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 2866946#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2866947#L1076 assume !(0 == initPersonOnFloor_~floor#1); 2868230#L1103 assume 1 == initPersonOnFloor_~floor#1; 2868775#L1104 assume !(0 == initPersonOnFloor_~person#1); 2869026#L1107 assume !(1 == initPersonOnFloor_~person#1); 2868303#L1110 assume !(2 == initPersonOnFloor_~person#1); 2868304#L1113 assume !(3 == initPersonOnFloor_~person#1); 2868318#L1116 assume !(4 == initPersonOnFloor_~person#1); 2867998#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 2866889#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2866890#L868 assume !(0 == callOnFloor_~floorID#1); 2868983#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 2869056#L880-2 assume { :end_inline_callOnFloor } true; 2868194#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 2868195#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2868676#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2868677#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2869070#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2869072#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2868218#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2868219#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2869078#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2869079#L2413 assume !(0 != timeShift_~tmp___9~2#1); 2868880#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 2868881#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2867424#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2867425#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2868272#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 2868273#L1866 assume !(~currentFloorID~0 < 0); 2868767#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 2868768#$Ultimate##2076 assume ~currentFloorID~0 < 1; 2867408#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2867409#L805-2 assume !(0 == isFloorCalling_~floorID#1); 2868465#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2867903#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 2868346#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2866908#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2869067#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2869065#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2869066#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 2868103#L2236 assume !(0 != continueInDirection_~tmp~14#1); 2868104#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2868601#L2248-1 assume { :end_inline_continueInDirection } true; 2868602#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2869213#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2948295#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948293#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2948291#L611 assume !(0 != ~floorButtons_spc2_1~0); 2948288#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948286#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948269#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948262#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2948246#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 2948242#L198-2 [2022-12-13 12:39:03,972 INFO L750 eck$LassoCheckResult]: Loop: 2948242#L198-2 assume !false; 2948237#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2948232#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2948225#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2948218#L206 assume 1 != cleanup_~tmp___0~0#1; 2948214#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2948198#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2948191#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 2948188#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 2948185#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2948186#L805-22 assume !(0 == isFloorCalling_~floorID#1); 2950388#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2950389#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2950364#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2950356#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2950355#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2950354#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2934344#L805-26 assume !(0 == isFloorCalling_~floorID#1); 2899585#L809-26 assume !(1 == isFloorCalling_~floorID#1); 2899582#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2897894#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2897893#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2897892#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 2897891#L1673-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 2897888#L1677-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2897887#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2897885#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2897884#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2897882#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 2897881#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2897879#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2897878#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2897877#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2897875#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2897874#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2897873#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2897871#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2897866#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2897867#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2897864#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 2897862#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2897863#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 2898682#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2896874#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 2896868#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 2896860#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 2896851#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2869826#L2248-11 assume { :end_inline_continueInDirection } true; 2869824#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2869816#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2869817#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2869801#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 2869802#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 2869773#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 2869764#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2869759#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2869760#L198-2 assume !false; 2896829#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 2896828#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 2896827#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 2869753#L206 assume 1 != cleanup_~tmp___0~0#1; 2869752#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2869750#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2869751#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 2869746#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 2869744#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2869742#L805-22 assume !(0 == isFloorCalling_~floorID#1); 2869743#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2869738#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 2869709#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 2869710#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 2903417#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 2903415#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 2903412#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 2903410#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 2903408#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 2903406#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 2903404#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 2903401#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 2903399#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 2903394#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 2903395#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 2947033#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2947030#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 2947031#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2949181#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 2949180#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 2949178#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 2949176#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2949177#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 2948983#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 2948947#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 2948798#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 2896853#L2232-5 assume !(1 == ~currentHeading~0); 2948725#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2948440#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2948438#L2248-11 assume { :end_inline_continueInDirection } true; 2948399#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 2948312#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 2948308#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948306#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 2948303#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 2897272#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948299#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 2948270#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 2897269#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2948247#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 2948242#L198-2 [2022-12-13 12:39:03,973 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:03,973 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 3 times [2022-12-13 12:39:03,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:03,973 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1361256367] [2022-12-13 12:39:03,973 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:03,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:03,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:03,982 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:39:03,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:03,999 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:39:03,999 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:03,999 INFO L85 PathProgramCache]: Analyzing trace with hash -1121965759, now seen corresponding path program 1 times [2022-12-13 12:39:03,999 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:03,999 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [486054366] [2022-12-13 12:39:03,999 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:04,000 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:04,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:39:04,047 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 33 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-13 12:39:04,047 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:39:04,047 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [486054366] [2022-12-13 12:39:04,047 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [486054366] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:39:04,047 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:39:04,047 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-12-13 12:39:04,047 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1602325518] [2022-12-13 12:39:04,047 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:39:04,048 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:39:04,048 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:39:04,048 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-12-13 12:39:04,048 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-12-13 12:39:04,048 INFO L87 Difference]: Start difference. First operand 295339 states and 542439 transitions. cyclomatic complexity: 247102 Second operand has 6 states, 6 states have (on average 16.666666666666668) internal successors, (100), 6 states have internal predecessors, (100), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:07,089 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:39:07,089 INFO L93 Difference]: Finished difference Result 874707 states and 1611765 transitions. [2022-12-13 12:39:07,089 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 874707 states and 1611765 transitions. [2022-12-13 12:39:10,847 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 865760 [2022-12-13 12:39:13,133 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 874707 states to 874635 states and 1611693 transitions. [2022-12-13 12:39:13,133 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 874635 [2022-12-13 12:39:13,764 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 874635 [2022-12-13 12:39:13,765 INFO L73 IsDeterministic]: Start isDeterministic. Operand 874635 states and 1611693 transitions. [2022-12-13 12:39:14,010 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:39:14,010 INFO L218 hiAutomatonCegarLoop]: Abstraction has 874635 states and 1611693 transitions. [2022-12-13 12:39:14,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 874635 states and 1611693 transitions. [2022-12-13 12:39:18,109 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 874635 to 295291. [2022-12-13 12:39:18,281 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 295291 states, 295291 states have (on average 1.8362395061143075) internal successors, (542225), 295290 states have internal predecessors, (542225), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:19,004 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 295291 states to 295291 states and 542225 transitions. [2022-12-13 12:39:19,004 INFO L240 hiAutomatonCegarLoop]: Abstraction has 295291 states and 542225 transitions. [2022-12-13 12:39:19,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-13 12:39:19,005 INFO L428 stractBuchiCegarLoop]: Abstraction has 295291 states and 542225 transitions. [2022-12-13 12:39:19,005 INFO L335 stractBuchiCegarLoop]: ======== Iteration 31 ============ [2022-12-13 12:39:19,005 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 295291 states and 542225 transitions. [2022-12-13 12:39:19,591 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 286642 [2022-12-13 12:39:19,591 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:39:19,591 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:39:19,624 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:19,624 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:19,624 INFO L748 eck$LassoCheckResult]: Stem: 4036996#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 4036997#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 4038182#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4037648#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 4037649#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 4037863#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 4038762#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 4036894#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 4036895#L458 assume !(0 == getOrigin_~person#1); 4038574#L462 assume !(1 == getOrigin_~person#1); 4038712#L466 assume !(2 == getOrigin_~person#1); 4038294#L470 assume !(3 == getOrigin_~person#1); 4038295#L474 assume !(4 == getOrigin_~person#1); 4038526#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 4037020#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4037021#L1076 assume !(0 == initPersonOnFloor_~floor#1); 4038315#L1103 assume 1 == initPersonOnFloor_~floor#1; 4038861#L1104 assume !(0 == initPersonOnFloor_~person#1); 4039128#L1107 assume !(1 == initPersonOnFloor_~person#1); 4038390#L1110 assume !(2 == initPersonOnFloor_~person#1); 4038391#L1113 assume !(3 == initPersonOnFloor_~person#1); 4038406#L1116 assume !(4 == initPersonOnFloor_~person#1); 4038077#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 4036965#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 4036966#L868 assume !(0 == callOnFloor_~floorID#1); 4039073#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 4039150#L880-2 assume { :end_inline_callOnFloor } true; 4039175#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 4039174#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4039173#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4039172#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 4039170#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 4038223#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 4038224#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 4037741#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4037743#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 4039171#L2413 assume !(0 != timeShift_~tmp___9~2#1); 4049767#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 4038977#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4038978#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 4038578#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 4038579#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 4036911#L1866 assume !(~currentFloorID~0 < 0); 4036912#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 4038919#$Ultimate##2076 assume ~currentFloorID~0 < 1; 4038920#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4036917#L805-2 assume !(0 == isFloorCalling_~floorID#1); 4036918#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4125700#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 4038433#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4036984#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4039165#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 4039166#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 4037818#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 4037819#L2236 assume !(0 != continueInDirection_~tmp~14#1); 4037951#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4037952#L2248-1 assume { :end_inline_continueInDirection } true; 4125430#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 4125428#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 4125427#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 4037303#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 4037304#L611 assume !(0 != ~floorButtons_spc2_1~0); 4038009#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 4125407#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 4125155#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 4125153#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 4039028#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 4039029#L198-2 [2022-12-13 12:39:19,625 INFO L750 eck$LassoCheckResult]: Loop: 4039029#L198-2 assume !false; 4160376#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 4160375#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 4120723#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 4120722#L206 assume 1 != cleanup_~tmp___0~0#1; 4120721#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4120720#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4120719#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 4120608#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 4120601#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4120602#L805-22 assume !(0 == isFloorCalling_~floorID#1); 4122085#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4122086#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 4121599#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 4121591#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 4121589#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 4121587#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4090792#L805-26 assume !(0 == isFloorCalling_~floorID#1); 4090790#L809-26 assume !(1 == isFloorCalling_~floorID#1); 4090777#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4090766#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 4090367#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 4090365#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 4090363#L1673-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 4090357#L1677-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 4090355#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 4090352#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4090350#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 4090346#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 4090344#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4090342#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4090341#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 4090340#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 4090338#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4090337#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4090334#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 4090331#L2287-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 4090329#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4090327#L1856-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 4090325#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 4090321#L1860-3 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4090320#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 4090318#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 4090317#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 4090316#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 4090315#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 4090314#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4090313#L2248-11 assume { :end_inline_continueInDirection } true; 4090311#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 4090279#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 4040187#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 4039891#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 4039892#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 4039872#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 4039862#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 4039861#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 4039860#L198-2 assume !false; 4039859#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 4039858#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 4039857#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 4039856#L206 assume 1 != cleanup_~tmp___0~0#1; 4039855#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4039854#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4039853#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 4039851#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 4039849#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4039848#L805-22 assume !(0 == isFloorCalling_~floorID#1); 4039845#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4039846#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 4039820#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 4039821#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 4099675#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 4099673#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 4099670#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 4099668#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 4099666#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 4099664#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 4099662#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 4099660#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4099657#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 4099652#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 4099653#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 4123257#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4123255#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 4039077#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4039078#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 4160127#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 4160128#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 4123033#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 4160545#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 4160529#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 4160523#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 4160520#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 4123018#L2232-5 assume !(1 == ~currentHeading~0); 4160514#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4160510#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4160508#L2248-11 assume { :end_inline_continueInDirection } true; 4160505#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 4160504#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 4160503#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 4160502#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 4160501#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 4048075#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 4160500#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 4160499#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 4048069#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 4160439#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 4039029#L198-2 [2022-12-13 12:39:19,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:19,625 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 4 times [2022-12-13 12:39:19,625 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:19,625 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [658327749] [2022-12-13 12:39:19,625 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:19,626 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:19,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:19,639 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:39:19,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:19,664 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:39:19,664 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:19,664 INFO L85 PathProgramCache]: Analyzing trace with hash -154615105, now seen corresponding path program 1 times [2022-12-13 12:39:19,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:19,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512223397] [2022-12-13 12:39:19,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:19,665 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:19,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:39:19,722 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 31 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-12-13 12:39:19,722 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:39:19,722 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [512223397] [2022-12-13 12:39:19,722 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [512223397] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:39:19,722 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:39:19,722 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:39:19,722 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [85267679] [2022-12-13 12:39:19,722 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:39:19,722 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:39:19,722 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:39:19,723 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:39:19,723 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:39:19,723 INFO L87 Difference]: Start difference. First operand 295291 states and 542225 transitions. cyclomatic complexity: 246936 Second operand has 7 states, 7 states have (on average 14.142857142857142) internal successors, (99), 7 states have internal predecessors, (99), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:22,263 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:39:22,263 INFO L93 Difference]: Finished difference Result 702647 states and 1295115 transitions. [2022-12-13 12:39:22,264 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 702647 states and 1295115 transitions. [2022-12-13 12:39:25,051 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 692352 [2022-12-13 12:39:27,152 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 702647 states to 701655 states and 1293627 transitions. [2022-12-13 12:39:27,152 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 701655 [2022-12-13 12:39:27,480 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 701655 [2022-12-13 12:39:27,480 INFO L73 IsDeterministic]: Start isDeterministic. Operand 701655 states and 1293627 transitions. [2022-12-13 12:39:27,687 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:39:27,687 INFO L218 hiAutomatonCegarLoop]: Abstraction has 701655 states and 1293627 transitions. [2022-12-13 12:39:28,004 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 701655 states and 1293627 transitions. [2022-12-13 12:39:30,864 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 701655 to 251321. [2022-12-13 12:39:30,968 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 251321 states, 251321 states have (on average 1.8374867201706184) internal successors, (461799), 251320 states have internal predecessors, (461799), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:31,409 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 251321 states to 251321 states and 461799 transitions. [2022-12-13 12:39:31,410 INFO L240 hiAutomatonCegarLoop]: Abstraction has 251321 states and 461799 transitions. [2022-12-13 12:39:31,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2022-12-13 12:39:31,411 INFO L428 stractBuchiCegarLoop]: Abstraction has 251321 states and 461799 transitions. [2022-12-13 12:39:31,411 INFO L335 stractBuchiCegarLoop]: ======== Iteration 32 ============ [2022-12-13 12:39:31,411 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 251321 states and 461799 transitions. [2022-12-13 12:39:32,306 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 243008 [2022-12-13 12:39:32,306 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:39:32,306 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:39:32,337 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:32,337 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:32,337 INFO L748 eck$LassoCheckResult]: Stem: 5034973#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5034974#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 5036115#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5035610#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 5035611#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 5035804#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 5036712#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 5034870#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5034871#L458 assume !(0 == getOrigin_~person#1); 5036520#L462 assume !(1 == getOrigin_~person#1); 5036658#L466 assume !(2 == getOrigin_~person#1); 5036238#L470 assume !(3 == getOrigin_~person#1); 5036239#L474 assume !(4 == getOrigin_~person#1); 5036471#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 5034997#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5034998#L1076 assume !(0 == initPersonOnFloor_~floor#1); 5036256#L1103 assume 1 == initPersonOnFloor_~floor#1; 5036815#L1104 assume !(0 == initPersonOnFloor_~person#1); 5037085#L1107 assume !(1 == initPersonOnFloor_~person#1); 5036325#L1110 assume !(2 == initPersonOnFloor_~person#1); 5036326#L1113 assume !(3 == initPersonOnFloor_~person#1); 5036342#L1116 assume !(4 == initPersonOnFloor_~person#1); 5036014#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 5034942#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5034943#L868 assume !(0 == callOnFloor_~floorID#1); 5037029#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 5037116#L880-2 assume { :end_inline_callOnFloor } true; 5037137#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 5037136#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5037135#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5037134#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5037133#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5036160#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5036161#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5035697#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5035698#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5037131#L2413 assume !(0 != timeShift_~tmp___9~2#1); 5037132#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 5073768#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5073767#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5073766#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 5073765#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 5073764#L1866 assume !(~currentFloorID~0 < 0); 5073763#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 5073762#$Ultimate##2076 assume ~currentFloorID~0 < 1; 5073761#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5073760#L805-2 assume !(0 == isFloorCalling_~floorID#1); 5036505#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5035703#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 5035704#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5037129#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5037130#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5037125#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5037126#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 5036124#L2236 assume !(0 != continueInDirection_~tmp~14#1); 5036125#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5036646#L2248-1 assume { :end_inline_continueInDirection } true; 5036647#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5037779#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5037780#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 5035276#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 5035277#L611 assume !(0 != ~floorButtons_spc2_1~0); 5035945#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 5035740#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 5035741#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 5035723#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5035724#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 5073726#L198-2 [2022-12-13 12:39:32,337 INFO L750 eck$LassoCheckResult]: Loop: 5073726#L198-2 assume !false; 5073725#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5073724#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5040823#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5040822#L206 assume 1 != cleanup_~tmp___0~0#1; 5040821#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5040820#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5040819#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 5040817#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 5040815#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5040814#L805-22 assume !(0 == isFloorCalling_~floorID#1); 5040812#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5040813#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5040788#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5040780#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5040779#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5040778#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5040777#L805-26 assume !(0 == isFloorCalling_~floorID#1); 5040775#L809-26 assume !(1 == isFloorCalling_~floorID#1); 5040772#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5040771#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5040770#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5040769#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 5040768#L1673-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 5040765#L1677-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5040764#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5040762#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5040761#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5040758#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 5040756#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5040750#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5040748#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5040746#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 5040742#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5040740#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5040738#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 5040736#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 5040734#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5040732#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 5040730#L2025-3 assume !(0 == ~currentFloorID~0); 5040727#L2031-3 assume ~currentFloorID~0 > 0; 5040725#L2032-3 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5040723#L805-42 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5040721#isFloorCalling_returnLabel#43 stopRequestedInDirection_#t~ret38#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret38#1;havoc stopRequestedInDirection_#t~ret38#1; 5040671#L2036-3 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5040665#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 5040663#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5040662#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5040658#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 5040659#L2236-15 assume 0 != continueInDirection_~tmp~14#1;~currentHeading~0 := 0; 5041957#L2242-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5041947#L2248-11 assume { :end_inline_continueInDirection } true; 5041931#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5041921#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5041914#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5041912#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 5041913#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 5041886#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5041864#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5041862#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5041860#L198-2 assume !false; 5041858#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5041856#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5041854#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5041852#L206 assume 1 != cleanup_~tmp___0~0#1; 5041850#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5041848#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5041846#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 5041843#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 5041839#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5041836#L805-22 assume !(0 == isFloorCalling_~floorID#1); 5041827#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5041814#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5041806#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5041796#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5041795#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5041794#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5040162#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5040130#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5040128#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5040124#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5040123#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5040121#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5040120#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5040118#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 5040119#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5073936#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5073870#L1856-2 assume !(1 == stopRequestedInDirection_~dir#1); 5073869#L2025-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5073868#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5073858#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 5073852#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 5073838#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5073828#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 5073813#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5073808#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 5073801#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5073798#L2232-5 assume !(1 == ~currentHeading~0); 5073783#L2242-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 5073780#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5073778#L2248-11 assume { :end_inline_continueInDirection } true; 5073775#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5073774#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5073773#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 5073772#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 5073771#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 5042367#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 5073770#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 5073769#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 5042363#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5073727#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5073726#L198-2 [2022-12-13 12:39:32,338 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:32,338 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 5 times [2022-12-13 12:39:32,338 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:32,338 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1533667325] [2022-12-13 12:39:32,338 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:32,338 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:32,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:32,347 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:39:32,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:32,364 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:39:32,364 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:32,364 INFO L85 PathProgramCache]: Analyzing trace with hash -1651162346, now seen corresponding path program 1 times [2022-12-13 12:39:32,365 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:32,365 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140826318] [2022-12-13 12:39:32,365 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:32,365 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:32,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:39:32,423 INFO L134 CoverageAnalysis]: Checked inductivity of 44 backedges. 34 proven. 0 refuted. 0 times theorem prover too weak. 10 trivial. 0 not checked. [2022-12-13 12:39:32,424 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:39:32,424 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140826318] [2022-12-13 12:39:32,424 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2140826318] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:39:32,424 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:39:32,424 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-12-13 12:39:32,424 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [331422709] [2022-12-13 12:39:32,424 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:39:32,424 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:39:32,425 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:39:32,425 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-12-13 12:39:32,425 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-12-13 12:39:32,425 INFO L87 Difference]: Start difference. First operand 251321 states and 461799 transitions. cyclomatic complexity: 210482 Second operand has 7 states, 7 states have (on average 14.857142857142858) internal successors, (104), 7 states have internal predecessors, (104), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:33,873 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:39:33,873 INFO L93 Difference]: Finished difference Result 281195 states and 514780 transitions. [2022-12-13 12:39:33,873 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 281195 states and 514780 transitions. [2022-12-13 12:39:34,859 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 267700 [2022-12-13 12:39:35,679 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 281195 states to 281195 states and 514780 transitions. [2022-12-13 12:39:35,679 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 281195 [2022-12-13 12:39:35,817 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 281195 [2022-12-13 12:39:35,817 INFO L73 IsDeterministic]: Start isDeterministic. Operand 281195 states and 514780 transitions. [2022-12-13 12:39:35,929 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:39:35,929 INFO L218 hiAutomatonCegarLoop]: Abstraction has 281195 states and 514780 transitions. [2022-12-13 12:39:36,052 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 281195 states and 514780 transitions. [2022-12-13 12:39:37,393 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 281195 to 135529. [2022-12-13 12:39:37,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 135529 states, 135529 states have (on average 1.833843679212567) internal successors, (248539), 135528 states have internal predecessors, (248539), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:37,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 135529 states to 135529 states and 248539 transitions. [2022-12-13 12:39:37,679 INFO L240 hiAutomatonCegarLoop]: Abstraction has 135529 states and 248539 transitions. [2022-12-13 12:39:37,679 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2022-12-13 12:39:37,679 INFO L428 stractBuchiCegarLoop]: Abstraction has 135529 states and 248539 transitions. [2022-12-13 12:39:37,680 INFO L335 stractBuchiCegarLoop]: ======== Iteration 33 ============ [2022-12-13 12:39:37,680 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 135529 states and 248539 transitions. [2022-12-13 12:39:38,130 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 127216 [2022-12-13 12:39:38,130 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-12-13 12:39:38,130 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-12-13 12:39:38,149 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:38,149 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-12-13 12:39:38,149 INFO L748 eck$LassoCheckResult]: Stem: 5567525#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~cleanupTimeShifts~0 := 12;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5567526#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret17#1, main_~retValue_acc~1#1, main_~tmp~8#1;havoc main_~retValue_acc~1#1;havoc main_~tmp~8#1;assume { :begin_inline_select_helpers } true; 5568649#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 5568153#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~9#1;havoc valid_product_~retValue_acc~9#1;valid_product_~retValue_acc~9#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~9#1; 5568154#valid_product_returnLabel#1 main_#t~ret17#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~8#1 := main_#t~ret17#1;havoc main_#t~ret17#1; 5568346#L399 assume 0 != main_~tmp~8#1;assume { :begin_inline_setup } true; 5569203#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 5567420#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret10#1, bigMacCall_~tmp~5#1;havoc bigMacCall_~tmp~5#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~3#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~3#1; 5567421#L458 assume !(0 == getOrigin_~person#1); 5569023#L462 assume !(1 == getOrigin_~person#1); 5569157#L466 assume !(2 == getOrigin_~person#1); 5568759#L470 assume !(3 == getOrigin_~person#1); 5568760#L474 assume !(4 == getOrigin_~person#1); 5568977#L478 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~3#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~3#1; 5567549#getOrigin_returnLabel#1 bigMacCall_#t~ret10#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~5#1 := bigMacCall_#t~ret10#1;havoc bigMacCall_#t~ret10#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~5#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5567550#L1076 assume !(0 == initPersonOnFloor_~floor#1); 5568778#L1103 assume 1 == initPersonOnFloor_~floor#1; 5569307#L1104 assume !(0 == initPersonOnFloor_~person#1); 5569569#L1107 assume !(1 == initPersonOnFloor_~person#1); 5568847#L1110 assume !(2 == initPersonOnFloor_~person#1); 5568848#L1113 assume !(3 == initPersonOnFloor_~person#1); 5568864#L1116 assume !(4 == initPersonOnFloor_~person#1); 5568550#L1119 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 5567492#L1184-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5567493#L868 assume !(0 == callOnFloor_~floorID#1); 5569515#L871 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 5569592#L880-2 assume { :end_inline_callOnFloor } true; 5590349#initPersonOnFloor_returnLabel#1 assume { :end_inline_initPersonOnFloor } true; 5590348#bigMacCall_returnLabel#1 assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret11#1, cleanup_#t~ret12#1, cleanup_~i~0#1, cleanup_~tmp~6#1, cleanup_~tmp___0~0#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~0#1;havoc cleanup_~tmp~6#1;havoc cleanup_~tmp___0~0#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5590347#L805 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5590346#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5590341#L2265 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5590342#L1669 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5590345#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5590343#L2272 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5590344#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5590333#L2413 assume !(0 != timeShift_~tmp___9~2#1); 5569404#L2504 assume 1 == ~doorState~0;~doorState~0 := 0; 5569405#L2504-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5568011#L1856 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5568012#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 5568819#L1860 assume !(0 != stopRequestedInDirection_~tmp~13#1); 5568820#L1866 assume !(~currentFloorID~0 < 0); 5569299#$Ultimate##2070 assume !(~currentFloorID~0 < 0); 5569300#$Ultimate##2076 assume ~currentFloorID~0 < 1; 5567998#L1896 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5567999#L805-2 assume !(0 == isFloorCalling_~floorID#1); 5569005#L809-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5568248#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret34#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret34#1;havoc stopRequestedInDirection_#t~ret34#1; 5568249#L1900 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5569615#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5569616#L2512 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5569603#L2232 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5569604#isTopFloor_returnLabel#2 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 5568656#L2236 assume !(0 != continueInDirection_~tmp~14#1); 5568657#L2242-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5569145#L2248-1 assume { :end_inline_continueInDirection } true; 5569146#L2521-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5569760#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5569761#L595 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 5567823#$Ultimate##2557 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 5567824#L611 assume !(0 != ~floorButtons_spc2_1~0); 5568896#$Ultimate##2566 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 5568897#$Ultimate##2575 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 5568570#$Ultimate##2584 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 5568571#L655 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5569464#timeShift_returnLabel#1 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 0; 5569465#L198-2 [2022-12-13 12:39:38,150 INFO L750 eck$LassoCheckResult]: Loop: 5569465#L198-2 assume !false; 5625667#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5625665#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5625663#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5625422#L206 assume 1 != cleanup_~tmp___0~0#1; 5625423#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5609427#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5609428#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 5609420#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 5609421#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5617309#L805-22 assume !(0 == isFloorCalling_~floorID#1); 5617310#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5625226#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5625227#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5617217#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5617218#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5603057#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5603058#L805-26 assume !(0 == isFloorCalling_~floorID#1); 5598793#L809-26 assume !(1 == isFloorCalling_~floorID#1); 5598794#L813-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5627608#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5627592#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5627593#L1669-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 5627604#L1673-1 assume !(1 == buttonForFloorIsPressed_~floorID#1); 5627600#L1677-1 assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5627596#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5627594#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5625424#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5625425#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 5627585#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5627583#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5627582#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5627581#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 5627579#L1860-2 assume !(0 != stopRequestedInDirection_~tmp~13#1); 5627578#L1866-2 assume !(~currentFloorID~0 < 0); 5627577#$Ultimate##4610 assume !(~currentFloorID~0 < 0); 5627576#$Ultimate##4616 assume !(~currentFloorID~0 < 1); 5627575#$Ultimate##4632 assume !(~currentFloorID~0 < 1); 5627574#$Ultimate##4638 assume ~currentFloorID~0 < 2; 5627573#L1925-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 2;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5627572#L805-29 assume !(0 == isFloorCalling_~floorID#1); 5627569#L809-29 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5627554#isFloorCalling_returnLabel#30 stopRequestedInDirection_#t~ret35#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___2~3#1 := stopRequestedInDirection_#t~ret35#1;havoc stopRequestedInDirection_#t~ret35#1; 5627546#L1929-2 assume 0 != stopRequestedInDirection_~tmp___2~3#1;stopRequestedInDirection_~retValue_acc~18#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5627537#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5627536#L2512-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5627535#L2232-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5627534#isTopFloor_returnLabel#7 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 5627533#L2236-9 assume !(0 != continueInDirection_~tmp~14#1); 5627532#L2242-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5627530#L2248-7 assume { :end_inline_continueInDirection } true; 5627528#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5627527#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5627524#L595-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5627522#L596-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~12#1;havoc areDoorsOpen_~retValue_acc~12#1;areDoorsOpen_~retValue_acc~12#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~12#1; 5627517#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret19#1 := areDoorsOpen_#res#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret19#1;havoc __utac_acc__Specification2_spec__3_#t~ret19#1; 5627510#L600-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5625979#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5627498#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5627497#L198-2 assume !false; 5627490#L199 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5627462#L202 assume cleanup_~i~0#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~10#1;havoc isBlocked_~retValue_acc~10#1;isBlocked_~retValue_acc~10#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~10#1; 5627425#isBlocked_returnLabel#1 cleanup_#t~ret11#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~0#1 := cleanup_#t~ret11#1;havoc cleanup_#t~ret11#1; 5627405#L206 assume 1 != cleanup_~tmp___0~0#1; 5627351#L206-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret31#1, isIdle_~retValue_acc~17#1, isIdle_~tmp~12#1;havoc isIdle_~retValue_acc~17#1;havoc isIdle_~tmp~12#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret26#1, anyStopRequested_#t~ret27#1, anyStopRequested_#t~ret28#1, anyStopRequested_#t~ret29#1, anyStopRequested_#t~ret30#1, anyStopRequested_~retValue_acc~16#1, anyStopRequested_~tmp~11#1, anyStopRequested_~tmp___0~3#1, anyStopRequested_~tmp___1~2#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~16#1;havoc anyStopRequested_~tmp~11#1;havoc anyStopRequested_~tmp___0~3#1;havoc anyStopRequested_~tmp___1~2#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5627349#L805-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5627347#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret26#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret26#1;havoc anyStopRequested_#t~ret26#1; 5627345#L1760 assume !(0 != anyStopRequested_~tmp___3~1#1); 5627343#L1764 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5627341#L805-22 assume !(0 == isFloorCalling_~floorID#1); 5627337#L809-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5627338#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret27#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret27#1;havoc anyStopRequested_#t~ret27#1; 5627318#L1771 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~16#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~16#1; 5626437#anyStopRequested_returnLabel#1 isIdle_#t~ret31#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~12#1 := isIdle_#t~ret31#1;havoc isIdle_#t~ret31#1;isIdle_~retValue_acc~17#1 := (if 0 == isIdle_~tmp~12#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~17#1; 5627301#isIdle_returnLabel#1 cleanup_#t~ret12#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~6#1 := cleanup_#t~ret12#1;havoc cleanup_#t~ret12#1; 5627288#L218 assume !(0 != cleanup_~tmp~6#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret58#1, timeShift_#t~ret59#1, timeShift_#t~ret60#1, timeShift_#t~ret61#1, timeShift_#t~ret62#1, timeShift_#t~ret63#1, timeShift_#t~ret64#1, timeShift_#t~ret65#1, timeShift_#t~ret66#1, timeShift_#t~ret67#1, timeShift_#t~ret68#1, timeShift_~tmp~17#1, timeShift_~tmp___0~7#1, timeShift_~tmp___1~5#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~17#1;havoc timeShift_~tmp___0~7#1;havoc timeShift_~tmp___1~5#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1, stopRequestedAtCurrentFloor_#t~ret45#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~15#1, stopRequestedAtCurrentFloor_~tmp___0~5#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~15#1;havoc stopRequestedAtCurrentFloor_~tmp___0~5#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~5#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~5#1; 5627285#L805-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~5#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~5#1; 5627283#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret44#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~5#1 := stopRequestedAtCurrentFloor_#t~ret44#1;havoc stopRequestedAtCurrentFloor_#t~ret44#1; 5627281#L2265-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~5#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~13#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~13#1; 5627279#L1669-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~13#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~13#1; 5627277#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret45#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~15#1 := stopRequestedAtCurrentFloor_#t~ret45#1;havoc stopRequestedAtCurrentFloor_#t~ret45#1; 5627274#L2272-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~15#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5627272#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret58#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret58#1;havoc timeShift_#t~ret58#1; 5627264#L2413-2 assume !(0 != timeShift_~tmp___9~2#1); 5627243#L2504-3 assume 1 == ~doorState~0;~doorState~0 := 0; 5627234#L2504-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5627233#L1856-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5627232#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret32#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~13#1 := stopRequestedInDirection_#t~ret32#1;havoc stopRequestedInDirection_#t~ret32#1; 5627226#L1860-2 assume 0 != stopRequestedInDirection_~tmp~13#1;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5627064#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret65#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret65#1;havoc timeShift_#t~ret65#1; 5627210#L2512-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1; 5627017#L2287-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; 5627196#getReverseHeading_returnLabel#3 timeShift_#t~ret66#1 := getReverseHeading_#res#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret66#1;havoc timeShift_#t~ret66#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret32#1, stopRequestedInDirection_#t~ret33#1, stopRequestedInDirection_#t~ret34#1, stopRequestedInDirection_#t~ret35#1, stopRequestedInDirection_#t~ret36#1, stopRequestedInDirection_#t~ret37#1, stopRequestedInDirection_#t~ret38#1, stopRequestedInDirection_#t~ret39#1, stopRequestedInDirection_#t~ret40#1, stopRequestedInDirection_#t~ret41#1, stopRequestedInDirection_#t~ret42#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~18#1, stopRequestedInDirection_~tmp~13#1, stopRequestedInDirection_~tmp___0~4#1, stopRequestedInDirection_~tmp___1~3#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~18#1;havoc stopRequestedInDirection_~tmp~13#1;havoc stopRequestedInDirection_~tmp___0~4#1;havoc stopRequestedInDirection_~tmp___1~3#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 5627183#L1856-3 assume !(1 == stopRequestedInDirection_~dir#1); 5627172#L2025-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~18#1; 5627038#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret67#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret67#1;havoc timeShift_#t~ret67#1; 5627019#L2521-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret43#1, continueInDirection_~dir#1, continueInDirection_~tmp~14#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~14#1;~currentHeading~0 := continueInDirection_~dir#1; 5627014#L2232-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~7#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~7#1;isTopFloor_~retValue_acc~7#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~7#1; 5627007#isTopFloor_returnLabel#10 continueInDirection_#t~ret43#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~14#1 := continueInDirection_#t~ret43#1;havoc continueInDirection_#t~ret43#1; 5627001#L2236-15 assume !(0 != continueInDirection_~tmp~14#1); 5626995#L2242-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5626983#L2248-11 assume { :end_inline_continueInDirection } true; 5626980#L2521-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret18#1, __utac_acc__Specification2_spec__3_#t~ret19#1, __utac_acc__Specification2_spec__3_#t~ret20#1, __utac_acc__Specification2_spec__3_#t~ret21#1, __utac_acc__Specification2_spec__3_#t~ret22#1, __utac_acc__Specification2_spec__3_#t~ret23#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~9#1, __utac_acc__Specification2_spec__3_~tmp___0~2#1, __utac_acc__Specification2_spec__3_~tmp___1~1#1, __utac_acc__Specification2_spec__3_~tmp___2~1#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~9#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~2#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~11#1;havoc getCurrentFloorID_~retValue_acc~11#1;getCurrentFloorID_~retValue_acc~11#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~11#1; 5626979#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret18#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~9#1 := __utac_acc__Specification2_spec__3_#t~ret18#1;havoc __utac_acc__Specification2_spec__3_#t~ret18#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~9#1; 5626978#L595-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 5626977#$Ultimate##5097 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 5626976#L611-1 assume !(0 != ~floorButtons_spc2_1~0); 5617467#$Ultimate##5106 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 5626975#$Ultimate##5115 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 5626974#$Ultimate##5124 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 5617460#L655-1 assume { :end_inline___utac_acc__Specification2_spec__3 } true; 5626973#timeShift_returnLabel#2 assume { :end_inline_timeShift } true;cleanup_~i~0#1 := 1 + cleanup_~i~0#1; 5569465#L198-2 [2022-12-13 12:39:38,150 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:38,150 INFO L85 PathProgramCache]: Analyzing trace with hash -506299987, now seen corresponding path program 6 times [2022-12-13 12:39:38,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:38,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2100316758] [2022-12-13 12:39:38,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:38,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:38,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:38,159 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-12-13 12:39:38,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-12-13 12:39:38,173 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-12-13 12:39:38,174 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-12-13 12:39:38,174 INFO L85 PathProgramCache]: Analyzing trace with hash -551763722, now seen corresponding path program 1 times [2022-12-13 12:39:38,174 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-12-13 12:39:38,174 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [678849700] [2022-12-13 12:39:38,174 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-12-13 12:39:38,174 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-12-13 12:39:38,180 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-12-13 12:39:38,212 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 30 proven. 0 refuted. 0 times theorem prover too weak. 7 trivial. 0 not checked. [2022-12-13 12:39:38,212 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-12-13 12:39:38,212 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [678849700] [2022-12-13 12:39:38,212 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [678849700] provided 1 perfect and 0 imperfect interpolant sequences [2022-12-13 12:39:38,212 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-12-13 12:39:38,212 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-12-13 12:39:38,212 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1774521782] [2022-12-13 12:39:38,212 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-12-13 12:39:38,213 INFO L765 eck$LassoCheckResult]: loop already infeasible [2022-12-13 12:39:38,213 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-12-13 12:39:38,213 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-12-13 12:39:38,213 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2022-12-13 12:39:38,213 INFO L87 Difference]: Start difference. First operand 135529 states and 248539 transitions. cyclomatic complexity: 113015 Second operand has 4 states, 4 states have (on average 26.75) internal successors, (107), 4 states have internal predecessors, (107), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-12-13 12:39:39,165 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-12-13 12:39:39,166 INFO L93 Difference]: Finished difference Result 183989 states and 335979 transitions. [2022-12-13 12:39:39,166 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 183989 states and 335979 transitions. [2022-12-13 12:39:39,894 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 175628 [2022-12-13 12:39:40,206 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 183989 states to 183941 states and 335927 transitions. [2022-12-13 12:39:40,206 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 183941 [2022-12-13 12:39:40,295 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 183941 [2022-12-13 12:39:40,295 INFO L73 IsDeterministic]: Start isDeterministic. Operand 183941 states and 335927 transitions. [2022-12-13 12:39:40,367 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-12-13 12:39:40,367 INFO L218 hiAutomatonCegarLoop]: Abstraction has 183941 states and 335927 transitions. [2022-12-13 12:39:40,445 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 183941 states and 335927 transitions. [2022-12-13 12:39:41,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 183941 to 174085. [2022-12-13 12:39:41,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 174085 states, 174085 states have (on average 1.830054283826866) internal successors, (318585), 174084 states have internal predecessors, (318585), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)