./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 527bcce2 Calling Ultimate with: /usr/lib/jvm/java-11-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 --- Real Ultimate output --- This is Ultimate 0.2.3-dev-527bcce [2023-11-21 22:24:53,820 INFO L188 SettingsManager]: Resetting all preferences to default values... [2023-11-21 22:24:53,930 INFO L114 SettingsManager]: Loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/config/svcomp-Termination-32bit-Automizer_Default.epf [2023-11-21 22:24:53,938 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2023-11-21 22:24:53,939 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2023-11-21 22:24:53,982 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2023-11-21 22:24:53,983 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2023-11-21 22:24:53,983 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2023-11-21 22:24:53,984 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2023-11-21 22:24:53,987 INFO L153 SettingsManager]: * Use memory slicer=true [2023-11-21 22:24:53,988 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2023-11-21 22:24:53,988 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2023-11-21 22:24:53,988 INFO L153 SettingsManager]: * Use SBE=true [2023-11-21 22:24:53,989 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2023-11-21 22:24:53,989 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2023-11-21 22:24:53,990 INFO L153 SettingsManager]: * Use old map elimination=false [2023-11-21 22:24:53,990 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2023-11-21 22:24:53,991 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2023-11-21 22:24:53,991 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2023-11-21 22:24:53,992 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2023-11-21 22:24:53,992 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2023-11-21 22:24:53,993 INFO L153 SettingsManager]: * sizeof long=4 [2023-11-21 22:24:53,993 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2023-11-21 22:24:53,994 INFO L153 SettingsManager]: * sizeof POINTER=4 [2023-11-21 22:24:53,994 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2023-11-21 22:24:53,994 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2023-11-21 22:24:53,995 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2023-11-21 22:24:53,995 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2023-11-21 22:24:53,996 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2023-11-21 22:24:53,996 INFO L153 SettingsManager]: * sizeof long double=12 [2023-11-21 22:24:53,997 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2023-11-21 22:24:53,998 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2023-11-21 22:24:53,998 INFO L153 SettingsManager]: * Use constant arrays=true [2023-11-21 22:24:53,998 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2023-11-21 22:24:53,998 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2023-11-21 22:24:53,999 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2023-11-21 22:24:53,999 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2023-11-21 22:24:54,000 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2023-11-21 22:24:54,001 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 680b86ee69d2fa1a591b34672ee94362515e8041606baf59201de5a19c705dd0 [2023-11-21 22:24:54,329 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2023-11-21 22:24:54,355 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2023-11-21 22:24:54,360 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2023-11-21 22:24:54,361 INFO L270 PluginConnector]: Initializing CDTParser... [2023-11-21 22:24:54,362 INFO L274 PluginConnector]: CDTParser initialized [2023-11-21 22:24:54,363 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/../../sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2023-11-21 22:24:57,541 INFO L533 CDTParser]: Created temporary CDT project at NULL [2023-11-21 22:24:57,917 INFO L384 CDTParser]: Found 1 translation units. [2023-11-21 22:24:57,918 INFO L180 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/sv-benchmarks/c/product-lines/elevator_spec1_product25.cil.c [2023-11-21 22:24:57,951 INFO L427 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/data/9f3708f26/1da372d48029431bac571409a4e083d5/FLAG8e8a62a20 [2023-11-21 22:24:57,979 INFO L435 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/data/9f3708f26/1da372d48029431bac571409a4e083d5 [2023-11-21 22:24:57,985 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2023-11-21 22:24:57,988 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2023-11-21 22:24:57,991 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2023-11-21 22:24:57,992 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2023-11-21 22:24:57,997 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2023-11-21 22:24:57,999 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:24:57" (1/1) ... [2023-11-21 22:24:58,000 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3a1f46d3 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58, skipping insertion in model container [2023-11-21 22:24:58,000 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.11 10:24:57" (1/1) ... [2023-11-21 22:24:58,094 INFO L177 MainTranslator]: Built tables and reachable declarations [2023-11-21 22:24:58,634 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:24:58,649 INFO L202 MainTranslator]: Completed pre-run [2023-11-21 22:24:58,660 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2023-11-21 22:24:58,662 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [86] [2023-11-21 22:24:58,662 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [452] [2023-11-21 22:24:58,662 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [553] [2023-11-21 22:24:58,663 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [562] [2023-11-21 22:24:58,663 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification1_spec.i","") [916] [2023-11-21 22:24:58,663 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1099] [2023-11-21 22:24:58,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1770] [2023-11-21 22:24:58,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1783] [2023-11-21 22:24:58,664 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1903] [2023-11-21 22:24:58,814 INFO L209 PostProcessor]: Analyzing one entry point: main [2023-11-21 22:24:58,850 INFO L206 MainTranslator]: Completed translation [2023-11-21 22:24:58,850 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58 WrapperNode [2023-11-21 22:24:58,851 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2023-11-21 22:24:58,852 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2023-11-21 22:24:58,854 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2023-11-21 22:24:58,854 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2023-11-21 22:24:58,860 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:58,887 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,118 INFO L138 Inliner]: procedures = 91, calls = 336, calls flagged for inlining = 189, calls inlined = 299, statements flattened = 8986 [2023-11-21 22:24:59,118 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2023-11-21 22:24:59,119 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2023-11-21 22:24:59,119 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2023-11-21 22:24:59,119 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2023-11-21 22:24:59,131 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,131 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,158 INFO L184 PluginConnector]: Executing the observer HeapSplitter from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,249 INFO L187 HeapSplitter]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4] [2023-11-21 22:24:59,249 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,249 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,346 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,474 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,490 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,510 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,541 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2023-11-21 22:24:59,543 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2023-11-21 22:24:59,543 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2023-11-21 22:24:59,544 INFO L274 PluginConnector]: RCFGBuilder initialized [2023-11-21 22:24:59,544 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (1/1) ... [2023-11-21 22:24:59,552 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2023-11-21 22:24:59,567 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/z3 [2023-11-21 22:24:59,584 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2023-11-21 22:24:59,605 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_d23fe82c-a3cf-49fb-9c60-9848716d783b/bin/uautomizer-verify-bycVGegfSx/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2023-11-21 22:24:59,626 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2023-11-21 22:24:59,626 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2023-11-21 22:24:59,627 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2023-11-21 22:24:59,627 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2023-11-21 22:24:59,628 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2023-11-21 22:24:59,629 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2023-11-21 22:24:59,630 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2023-11-21 22:24:59,630 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2023-11-21 22:24:59,630 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2023-11-21 22:24:59,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2023-11-21 22:24:59,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2023-11-21 22:24:59,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2023-11-21 22:24:59,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2023-11-21 22:24:59,631 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2023-11-21 22:24:59,632 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2023-11-21 22:24:59,632 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2023-11-21 22:24:59,861 INFO L240 CfgBuilder]: Building ICFG [2023-11-21 22:24:59,863 INFO L266 CfgBuilder]: Building CFG for each procedure with an implementation [2023-11-21 22:25:04,686 INFO L281 CfgBuilder]: Performing block encoding [2023-11-21 22:25:04,735 INFO L303 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2023-11-21 22:25:04,735 INFO L308 CfgBuilder]: Removed 1 assume(true) statements. [2023-11-21 22:25:04,738 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:25:04 BoogieIcfgContainer [2023-11-21 22:25:04,738 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2023-11-21 22:25:04,739 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2023-11-21 22:25:04,739 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2023-11-21 22:25:04,743 INFO L274 PluginConnector]: BuchiAutomizer initialized [2023-11-21 22:25:04,744 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-21 22:25:04,744 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 21.11 10:24:57" (1/3) ... [2023-11-21 22:25:04,745 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5c00ad68 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.11 10:25:04, skipping insertion in model container [2023-11-21 22:25:04,745 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-21 22:25:04,745 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.11 10:24:58" (2/3) ... [2023-11-21 22:25:04,745 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@5c00ad68 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 21.11 10:25:04, skipping insertion in model container [2023-11-21 22:25:04,746 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2023-11-21 22:25:04,746 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.11 10:25:04" (3/3) ... [2023-11-21 22:25:04,747 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec1_product25.cil.c [2023-11-21 22:25:04,853 INFO L303 stractBuchiCegarLoop]: Interprodecural is true [2023-11-21 22:25:04,853 INFO L304 stractBuchiCegarLoop]: Hoare is false [2023-11-21 22:25:04,853 INFO L305 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2023-11-21 22:25:04,853 INFO L306 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2023-11-21 22:25:04,853 INFO L307 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2023-11-21 22:25:04,854 INFO L308 stractBuchiCegarLoop]: Difference is false [2023-11-21 22:25:04,854 INFO L309 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2023-11-21 22:25:04,854 INFO L313 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2023-11-21 22:25:04,868 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:04,968 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2023-11-21 22:25:04,969 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:04,969 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:04,987 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:04,987 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:04,987 INFO L335 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2023-11-21 22:25:04,995 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:05,036 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1237 [2023-11-21 22:25:05,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:05,037 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:05,042 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:05,043 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:05,051 INFO L748 eck$LassoCheckResult]: Stem: 182#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2437#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 957#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 587#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 725#valid_product_returnLabel#1true main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 273#L903true assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 1674#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 1987#__utac_acc__Specification1_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 2082#L1829true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 194#getOrigin_returnLabel#1true bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 2348#L1463true assume 0 == initPersonOnFloor_~floor#1; 2540#L1464true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 685#L1571-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2511#L940true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 47#L952-2true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1234#L1255true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1866#L1267-2true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1046#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 449#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 397#L1829-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 416#getOrigin_returnLabel#2true angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 420#L1463-1true assume 0 == initPersonOnFloor_~floor#1; 96#L1464-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 73#L1571-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 2285#L940-2true assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 1203#L952-5true havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 1455#L1255-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 86#L1267-5true havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1050#initPersonOnFloor_returnLabel#2true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 767#angelinaCall_returnLabel#1true havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 1521#L1188true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 92#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 1409#L2760true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 274#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 973#L2908true assume !(0 != timeShift_~tmp___9~2#1); 2201#L2999true assume !(1 == ~doorState~0); 984#L2999-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 655#L2351true assume !(1 == stopRequestedInDirection_~dir#1); 1925#L2520true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1800#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 1157#L3007true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1580#L2727true assume !(1 == ~currentHeading~0); 1816#L2737true assume !(0 == ~currentFloorID~0); 1876#L2737-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 129#L2743-1true havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1433#L3016-2true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1128#getCurrentFloorID_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 633#L978true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 2026#L979true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 771#areDoorsOpen_returnLabel#1true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1086#L983true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1958#L1038true havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2130#timeShift_returnLabel#1true havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1394#L707-2true [2023-11-21 22:25:05,054 INFO L750 eck$LassoCheckResult]: Loop: 1394#L707-2true assume !false; 1908#L708true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 198#L711true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 947#isBlocked_returnLabel#1true cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 942#L715true assume 1 != cleanup_~tmp___0~2#1; 1532#L715-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 108#L1188-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1560#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 1738#L2255true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 153#anyStopRequested_returnLabel#1true isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 1180#isIdle_returnLabel#1true cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 484#L727true assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 2463#L1188-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 1196#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 234#L2760-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~7#1;stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 2196#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 2352#L2908-2true assume !(0 != timeShift_~tmp___9~2#1); 408#L2999-3true assume 1 == ~doorState~0;~doorState~0 := 0; 2013#L2999-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 145#L2351-2true assume !(1 == stopRequestedInDirection_~dir#1); 594#L2520-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 1222#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 324#L3007-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 2358#L2727-3true assume !(1 == ~currentHeading~0); 1601#L2737-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 936#L2737-11true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 551#L2743-7true havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 347#L3016-5true assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 1437#getCurrentFloorID_returnLabel#2true __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 1928#L978-1true assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 752#L979-1true assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 1502#areDoorsOpen_returnLabel#6true __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 1233#L983-2true assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 1567#L1038-1true havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 2162#timeShift_returnLabel#2true havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1394#L707-2true [2023-11-21 22:25:05,060 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:05,060 INFO L85 PathProgramCache]: Analyzing trace with hash 1914460111, now seen corresponding path program 1 times [2023-11-21 22:25:05,070 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:05,070 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030325937] [2023-11-21 22:25:05,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:05,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:05,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:05,547 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:05,547 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:05,548 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030325937] [2023-11-21 22:25:05,548 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1030325937] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:05,548 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:05,549 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:05,551 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996729132] [2023-11-21 22:25:05,551 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:05,556 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:05,557 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:05,558 INFO L85 PathProgramCache]: Analyzing trace with hash -657119561, now seen corresponding path program 1 times [2023-11-21 22:25:05,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:05,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1496491103] [2023-11-21 22:25:05,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:05,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:05,576 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:05,706 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:05,707 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:05,707 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1496491103] [2023-11-21 22:25:05,708 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1496491103] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:05,708 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:05,708 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:05,709 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [765699190] [2023-11-21 22:25:05,709 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:05,716 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:05,717 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:05,757 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:05,758 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:05,767 INFO L87 Difference]: Start difference. First operand has 2575 states, 2574 states have (on average 1.8632478632478633) internal successors, (4796), 2574 states have internal predecessors, (4796), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 7.0) internal successors, (35), 5 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:06,360 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:06,361 INFO L93 Difference]: Finished difference Result 6640 states and 12320 transitions. [2023-11-21 22:25:06,362 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 6640 states and 12320 transitions. [2023-11-21 22:25:06,442 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4336 [2023-11-21 22:25:06,523 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 6640 states to 6568 states and 12239 transitions. [2023-11-21 22:25:06,524 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 6568 [2023-11-21 22:25:06,536 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 6568 [2023-11-21 22:25:06,537 INFO L73 IsDeterministic]: Start isDeterministic. Operand 6568 states and 12239 transitions. [2023-11-21 22:25:06,562 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:06,562 INFO L218 hiAutomatonCegarLoop]: Abstraction has 6568 states and 12239 transitions. [2023-11-21 22:25:06,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6568 states and 12239 transitions. [2023-11-21 22:25:06,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6568 to 2551. [2023-11-21 22:25:06,802 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2551 states, 2551 states have (on average 1.86671893375147) internal successors, (4762), 2550 states have internal predecessors, (4762), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:06,815 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2551 states to 2551 states and 4762 transitions. [2023-11-21 22:25:06,816 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2023-11-21 22:25:06,817 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2023-11-21 22:25:06,823 INFO L428 stractBuchiCegarLoop]: Abstraction has 2551 states and 4762 transitions. [2023-11-21 22:25:06,823 INFO L335 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2023-11-21 22:25:06,823 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2551 states and 4762 transitions. [2023-11-21 22:25:06,842 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1239 [2023-11-21 22:25:06,843 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:06,843 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:06,848 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:06,849 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:06,850 INFO L748 eck$LassoCheckResult]: Stem: 9674#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 9675#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 10880#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 10393#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 10394#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 9849#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 9850#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 11511#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 11664#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 9699#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 9700#L1463 assume 0 == initPersonOnFloor_~floor#1; 11763#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 9620#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 10540#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 9355#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 9356#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 9972#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 10981#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10167#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 10080#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 10081#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 10109#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 9468#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 9318#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 9418#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 9956#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 11149#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 9450#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 9451#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 10643#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 10644#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 9459#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 9460#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 10114#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 10115#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 11005#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 11693#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 11785#L2908 assume !(0 != timeShift_~tmp___9~2#1); 11728#L2999 assume !(1 == ~doorState~0); 10906#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 10486#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 10487#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 9287#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 11101#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 11103#L2727 assume !(1 == ~currentHeading~0); 11458#L2737 assume !(0 == ~currentFloorID~0); 11588#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 9548#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9549#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 11067#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 10459#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 10460#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 10648#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 10649#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 9595#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11653#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 11311#L707-2 [2023-11-21 22:25:06,850 INFO L750 eck$LassoCheckResult]: Loop: 11311#L707-2 assume !false; 11312#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 9708#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 9709#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 10860#L715 assume 1 != cleanup_~tmp___0~2#1; 10861#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 9495#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 9496#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 11444#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 9608#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 9609#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 10234#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 10235#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 10183#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 9774#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 9775#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 9358#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 9657#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 9659#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 11786#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 10096#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 10097#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 9586#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 9587#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 9562#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 9950#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 9952#L2727-3 assume !(1 == ~currentHeading~0); 11474#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 10854#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 10338#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 9989#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 9990#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 11347#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 10624#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 10625#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 11178#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 10201#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 11448#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 11311#L707-2 [2023-11-21 22:25:06,851 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:06,851 INFO L85 PathProgramCache]: Analyzing trace with hash -808199730, now seen corresponding path program 1 times [2023-11-21 22:25:06,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:06,851 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1443046586] [2023-11-21 22:25:06,852 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:06,853 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:06,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:06,962 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:06,963 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:06,963 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1443046586] [2023-11-21 22:25:06,963 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1443046586] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:06,964 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:06,964 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:06,964 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [413865336] [2023-11-21 22:25:06,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:06,965 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:06,965 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:06,965 INFO L85 PathProgramCache]: Analyzing trace with hash -889864710, now seen corresponding path program 1 times [2023-11-21 22:25:06,966 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:06,966 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [68945168] [2023-11-21 22:25:06,966 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:06,966 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:06,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:07,050 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:07,050 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:07,051 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [68945168] [2023-11-21 22:25:07,051 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [68945168] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:07,051 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:07,051 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:25:07,052 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2124811436] [2023-11-21 22:25:07,052 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:07,052 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:07,052 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:07,053 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:25:07,053 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:25:07,053 INFO L87 Difference]: Start difference. First operand 2551 states and 4762 transitions. cyclomatic complexity: 2212 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:09,115 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:09,115 INFO L93 Difference]: Finished difference Result 10684 states and 19891 transitions. [2023-11-21 22:25:09,116 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 10684 states and 19891 transitions. [2023-11-21 22:25:09,211 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5350 [2023-11-21 22:25:09,303 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 10684 states to 10684 states and 19891 transitions. [2023-11-21 22:25:09,303 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 10684 [2023-11-21 22:25:09,322 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 10684 [2023-11-21 22:25:09,322 INFO L73 IsDeterministic]: Start isDeterministic. Operand 10684 states and 19891 transitions. [2023-11-21 22:25:09,339 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:09,339 INFO L218 hiAutomatonCegarLoop]: Abstraction has 10684 states and 19891 transitions. [2023-11-21 22:25:09,353 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10684 states and 19891 transitions. [2023-11-21 22:25:09,549 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10684 to 5048. [2023-11-21 22:25:09,561 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5048 states, 5048 states have (on average 1.8660855784469097) internal successors, (9420), 5047 states have internal predecessors, (9420), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:09,577 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5048 states to 5048 states and 9420 transitions. [2023-11-21 22:25:09,577 INFO L240 hiAutomatonCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2023-11-21 22:25:09,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-21 22:25:09,578 INFO L428 stractBuchiCegarLoop]: Abstraction has 5048 states and 9420 transitions. [2023-11-21 22:25:09,579 INFO L335 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2023-11-21 22:25:09,579 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5048 states and 9420 transitions. [2023-11-21 22:25:09,602 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2484 [2023-11-21 22:25:09,602 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:09,602 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:09,605 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:09,605 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:09,606 INFO L748 eck$LassoCheckResult]: Stem: 22934#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 22935#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 24164#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 23663#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 23664#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 23111#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 23112#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 24828#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 24988#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 22959#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 22960#L1463 assume 0 == initPersonOnFloor_~floor#1; 25097#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22880#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 23817#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 22614#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 22615#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 24477#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24270#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 23433#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 23345#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 23346#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 23376#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 23382#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 22677#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 22678#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 24444#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 24445#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 23813#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 24274#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 24275#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 24728#L1188 assume !(0 == isFloorCalling_~floorID#1); 24730#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 25286#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 25285#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 25283#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 25279#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 25277#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 25276#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 25274#L2908 assume !(0 != timeShift_~tmp___9~2#1); 25273#L2999 assume !(1 == ~doorState~0); 25272#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 25270#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 25238#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 25228#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 25224#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 25223#L2727 assume !(1 == ~currentHeading~0); 25208#L2737 assume !(0 == ~currentFloorID~0); 25195#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25190#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25188#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 25185#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 25182#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 25173#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 25172#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 25152#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 25145#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 25143#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 25142#L707-2 [2023-11-21 22:25:09,606 INFO L750 eck$LassoCheckResult]: Loop: 25142#L707-2 assume !false; 25141#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 25140#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 25139#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 25138#L715 assume 1 != cleanup_~tmp___0~2#1; 25137#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 22758#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 22759#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 24755#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 24872#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 25594#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 25593#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 25118#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 25120#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 25589#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 25588#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 25586#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 25582#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 25580#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 25579#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 25577#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 25576#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 25575#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 25573#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 25559#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 25537#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 25533#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 25534#L2727-3 assume !(1 == ~currentHeading~0); 26120#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 25215#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 25203#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 25194#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 25189#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 25187#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 25184#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 25180#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 25163#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 25146#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 25144#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 25142#L707-2 [2023-11-21 22:25:09,607 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:09,607 INFO L85 PathProgramCache]: Analyzing trace with hash 1510766569, now seen corresponding path program 1 times [2023-11-21 22:25:09,608 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:09,608 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [233573115] [2023-11-21 22:25:09,608 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:09,608 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:09,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:09,715 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:09,716 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:09,716 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [233573115] [2023-11-21 22:25:09,716 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [233573115] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:09,716 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:09,717 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:09,717 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [283663815] [2023-11-21 22:25:09,717 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:09,717 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:09,718 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:09,718 INFO L85 PathProgramCache]: Analyzing trace with hash -64448559, now seen corresponding path program 1 times [2023-11-21 22:25:09,718 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:09,719 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [244980324] [2023-11-21 22:25:09,719 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:09,719 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:09,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:09,793 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:09,793 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:09,794 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [244980324] [2023-11-21 22:25:09,794 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [244980324] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:09,794 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:09,794 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:09,795 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358991613] [2023-11-21 22:25:09,795 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:09,795 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:09,795 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:09,796 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:09,796 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:09,796 INFO L87 Difference]: Start difference. First operand 5048 states and 9420 transitions. cyclomatic complexity: 4373 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:11,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:11,537 INFO L93 Difference]: Finished difference Result 9034 states and 16823 transitions. [2023-11-21 22:25:11,537 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9034 states and 16823 transitions. [2023-11-21 22:25:11,589 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4529 [2023-11-21 22:25:11,648 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9034 states to 9034 states and 16823 transitions. [2023-11-21 22:25:11,648 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9034 [2023-11-21 22:25:11,660 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9034 [2023-11-21 22:25:11,661 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9034 states and 16823 transitions. [2023-11-21 22:25:11,673 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:11,673 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9034 states and 16823 transitions. [2023-11-21 22:25:11,685 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9034 states and 16823 transitions. [2023-11-21 22:25:11,912 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9034 to 9014. [2023-11-21 22:25:11,934 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9014 states, 9014 states have (on average 1.8627690259596184) internal successors, (16791), 9013 states have internal predecessors, (16791), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:11,961 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9014 states to 9014 states and 16791 transitions. [2023-11-21 22:25:11,961 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2023-11-21 22:25:11,962 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-21 22:25:11,963 INFO L428 stractBuchiCegarLoop]: Abstraction has 9014 states and 16791 transitions. [2023-11-21 22:25:11,963 INFO L335 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2023-11-21 22:25:11,963 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9014 states and 16791 transitions. [2023-11-21 22:25:11,998 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4519 [2023-11-21 22:25:11,999 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:11,999 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:12,003 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:12,003 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:12,004 INFO L748 eck$LassoCheckResult]: Stem: 37030#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 37031#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 38272#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 37770#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 37771#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 37208#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 37209#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 38959#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 39145#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 37055#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 37056#L1463 assume 0 == initPersonOnFloor_~floor#1; 39271#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 36976#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 37920#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 36709#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 36710#L1255 assume !(0 == callOnFloor_~floorID#1); 38589#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 37333#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 38380#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 37535#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 37447#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 37448#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 37476#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 36823#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 36672#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 36773#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 37315#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 38557#L1255-2 assume !(0 == callOnFloor_~floorID#1); 38795#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 36806#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 36807#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 38025#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 38026#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 38856#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 41950#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 37481#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 37482#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 41951#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 41952#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 41940#L2908 assume !(0 != timeShift_~tmp___9~2#1); 41941#L2999 assume !(1 == ~doorState~0); 43706#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 43704#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 43673#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 43664#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 38503#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 38505#L2727 assume !(1 == ~currentHeading~0); 43712#L2737 assume !(0 == ~currentFloorID~0); 39044#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 39082#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 39485#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 39484#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 39482#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 39483#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 39481#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 39458#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 39451#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 39449#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 39448#L707-2 [2023-11-21 22:25:12,004 INFO L750 eck$LassoCheckResult]: Loop: 39448#L707-2 assume !false; 39447#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 39446#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 39445#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 39444#L715 assume 1 != cleanup_~tmp___0~2#1; 39443#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 39442#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 39425#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 39415#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 39404#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 39399#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 39398#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 39397#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 39396#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 39395#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 39394#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 39392#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 39388#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 39385#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 39384#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 39382#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 39369#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 39368#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 39350#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 39336#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 39325#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 39323#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 39324#L2727-3 assume !(1 == ~currentHeading~0); 45601#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 38245#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 38246#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 39502#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 39501#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 39499#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 39500#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 39489#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 39469#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 39452#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 39450#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 39448#L707-2 [2023-11-21 22:25:12,004 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:12,004 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 1 times [2023-11-21 22:25:12,005 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:12,005 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [271147615] [2023-11-21 22:25:12,005 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:12,005 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:12,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,093 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:12,093 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:12,094 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [271147615] [2023-11-21 22:25:12,094 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [271147615] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:12,094 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:12,095 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:12,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1956651088] [2023-11-21 22:25:12,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:12,095 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:12,096 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:12,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1863622482, now seen corresponding path program 1 times [2023-11-21 22:25:12,096 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:12,097 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1895503347] [2023-11-21 22:25:12,097 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:12,097 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:12,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:12,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:12,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:12,150 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1895503347] [2023-11-21 22:25:12,150 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1895503347] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:12,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:12,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:12,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1339697020] [2023-11-21 22:25:12,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:12,152 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:12,152 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:12,152 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:12,153 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:12,153 INFO L87 Difference]: Start difference. First operand 9014 states and 16791 transitions. cyclomatic complexity: 7778 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:12,675 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:12,675 INFO L93 Difference]: Finished difference Result 23637 states and 43989 transitions. [2023-11-21 22:25:12,675 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23637 states and 43989 transitions. [2023-11-21 22:25:12,821 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16423 [2023-11-21 22:25:12,941 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23637 states to 23637 states and 43989 transitions. [2023-11-21 22:25:12,942 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23637 [2023-11-21 22:25:12,978 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23637 [2023-11-21 22:25:12,979 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23637 states and 43989 transitions. [2023-11-21 22:25:13,007 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:13,007 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23637 states and 43989 transitions. [2023-11-21 22:25:13,040 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23637 states and 43989 transitions. [2023-11-21 22:25:13,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23637 to 16123. [2023-11-21 22:25:13,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16123 states, 16123 states have (on average 1.8627426657569932) internal successors, (30033), 16122 states have internal predecessors, (30033), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:13,619 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16123 states to 16123 states and 30033 transitions. [2023-11-21 22:25:13,620 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2023-11-21 22:25:13,620 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2023-11-21 22:25:13,622 INFO L428 stractBuchiCegarLoop]: Abstraction has 16123 states and 30033 transitions. [2023-11-21 22:25:13,622 INFO L335 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2023-11-21 22:25:13,622 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16123 states and 30033 transitions. [2023-11-21 22:25:13,676 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8912 [2023-11-21 22:25:13,676 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:13,676 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:13,681 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:13,681 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:13,682 INFO L748 eck$LassoCheckResult]: Stem: 69698#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 69699#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 70956#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 70446#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 70447#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 69879#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 69880#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 71682#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 71876#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 69725#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 69726#L1463 assume 0 == initPersonOnFloor_~floor#1; 72038#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 69645#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 70604#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 69375#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 69376#L1255 assume !(0 == callOnFloor_~floorID#1); 71291#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 70003#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 71810#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 70209#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 70210#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 70147#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 70148#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 69492#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 69339#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 72020#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 69986#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 71499#L1255-2 assume !(0 == callOnFloor_~floorID#1); 71500#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 69475#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 69476#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 70709#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 70710#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 72096#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 72094#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 72091#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 72092#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 74125#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 74119#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 74117#L2908 assume !(0 != timeShift_~tmp___9~2#1); 73110#L2999 assume !(1 == ~doorState~0); 72490#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 72488#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 72332#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 72309#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 72297#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 72287#L2727 assume !(1 == ~currentHeading~0); 72277#L2737 assume !(0 == ~currentFloorID~0); 72267#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 72263#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 72262#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 72261#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 72260#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 72258#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 72255#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 72246#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 72240#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 72238#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 72237#L707-2 [2023-11-21 22:25:13,684 INFO L750 eck$LassoCheckResult]: Loop: 72237#L707-2 assume !false; 72236#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 72235#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 72234#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 72233#L715 assume 1 != cleanup_~tmp___0~2#1; 72232#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 72230#L1188-21 assume !(0 == isFloorCalling_~floorID#1); 72225#L1192-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 72205#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 72199#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 72187#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 72186#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 72185#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 72183#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 72182#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 72181#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 72179#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 72176#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 72171#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 72170#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 72168#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 72167#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 72165#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 72166#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 75611#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 75597#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 75587#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 75579#L2727-3 assume !(1 == ~currentHeading~0); 75570#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 75566#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 75562#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 75561#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 75534#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 75531#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 75532#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 75533#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 75264#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 75236#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 72239#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 72237#L707-2 [2023-11-21 22:25:13,684 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:13,685 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 2 times [2023-11-21 22:25:13,685 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:13,685 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [165547002] [2023-11-21 22:25:13,685 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:13,685 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:13,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,785 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:13,785 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:13,785 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [165547002] [2023-11-21 22:25:13,785 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [165547002] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:13,786 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:13,786 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:13,786 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1475394017] [2023-11-21 22:25:13,786 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:13,787 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:13,788 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:13,788 INFO L85 PathProgramCache]: Analyzing trace with hash 85645251, now seen corresponding path program 1 times [2023-11-21 22:25:13,788 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:13,788 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [907737502] [2023-11-21 22:25:13,788 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:13,789 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:13,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:13,817 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:13,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:13,818 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [907737502] [2023-11-21 22:25:13,818 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [907737502] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:13,818 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:13,819 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:13,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1727564326] [2023-11-21 22:25:13,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:13,819 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:13,821 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:13,821 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:25:13,822 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:25:13,822 INFO L87 Difference]: Start difference. First operand 16123 states and 30033 transitions. cyclomatic complexity: 13911 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:14,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:14,424 INFO L93 Difference]: Finished difference Result 16039 states and 29703 transitions. [2023-11-21 22:25:14,424 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16039 states and 29703 transitions. [2023-11-21 22:25:14,635 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8820 [2023-11-21 22:25:14,701 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16039 states to 16039 states and 29703 transitions. [2023-11-21 22:25:14,701 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16039 [2023-11-21 22:25:14,736 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16039 [2023-11-21 22:25:14,736 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16039 states and 29703 transitions. [2023-11-21 22:25:14,750 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:14,751 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16039 states and 29703 transitions. [2023-11-21 22:25:14,767 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16039 states and 29703 transitions. [2023-11-21 22:25:14,935 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16039 to 15895. [2023-11-21 22:25:14,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15895 states, 15895 states have (on average 1.8596413966656182) internal successors, (29559), 15894 states have internal predecessors, (29559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:15,020 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15895 states to 15895 states and 29559 transitions. [2023-11-21 22:25:15,021 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29559 transitions. [2023-11-21 22:25:15,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:25:15,024 INFO L428 stractBuchiCegarLoop]: Abstraction has 15895 states and 29559 transitions. [2023-11-21 22:25:15,024 INFO L335 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2023-11-21 22:25:15,024 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15895 states and 29559 transitions. [2023-11-21 22:25:15,161 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2023-11-21 22:25:15,161 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:15,161 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:15,166 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:15,166 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:15,167 INFO L748 eck$LassoCheckResult]: Stem: 101856#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 101857#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 103086#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 102583#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 102584#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 102031#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 102032#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 103750#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 103916#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 101881#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 101882#L1463 assume 0 == initPersonOnFloor_~floor#1; 104035#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 101805#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 102734#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 101544#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 101545#L1255 assume !(0 == callOnFloor_~floorID#1); 103403#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 102153#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 104519#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 104518#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 104514#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 104511#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 104509#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 101657#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 101507#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 104023#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 102136#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 103369#L1255-2 assume !(0 == callOnFloor_~floorID#1); 103603#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 101639#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 101640#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 104362#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 104359#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 104356#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 104355#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 104352#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 104348#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 104346#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 104343#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 104340#L2908 assume !(0 != timeShift_~tmp___9~2#1); 104338#L2999 assume !(1 == ~doorState~0); 104336#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 104332#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 104230#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 104216#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 104206#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 104198#L2727 assume !(1 == ~currentHeading~0); 104189#L2737 assume !(0 == ~currentFloorID~0); 104185#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 104181#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 104178#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 104176#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 104173#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 104166#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 104147#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 104148#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 104110#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 104111#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 104105#L707-2 [2023-11-21 22:25:15,167 INFO L750 eck$LassoCheckResult]: Loop: 104105#L707-2 assume !false; 104106#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 104101#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 104102#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 104097#L715 assume 1 != cleanup_~tmp___0~2#1; 104098#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 104093#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 104094#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 104088#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 104089#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 103760#L1188-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 101959#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 103808#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 104995#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 104994#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 104993#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 104992#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 104991#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 104900#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 104758#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 104753#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 104749#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 104748#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 104745#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 104744#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 104741#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 104739#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 104629#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 104615#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 104605#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 104597#L2727-3 assume !(1 == ~currentHeading~0); 104588#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 104584#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 104579#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 104580#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 104177#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 104175#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 104171#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 104160#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 104161#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 104112#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 104113#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 104105#L707-2 [2023-11-21 22:25:15,168 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:15,169 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 3 times [2023-11-21 22:25:15,169 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:15,169 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [245100550] [2023-11-21 22:25:15,169 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:15,169 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:15,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:15,276 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:15,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:15,278 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [245100550] [2023-11-21 22:25:15,278 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [245100550] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:15,278 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:15,278 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:15,283 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1459859283] [2023-11-21 22:25:15,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:15,283 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:15,284 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:15,284 INFO L85 PathProgramCache]: Analyzing trace with hash 1331043666, now seen corresponding path program 1 times [2023-11-21 22:25:15,284 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:15,284 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1700385571] [2023-11-21 22:25:15,284 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:15,284 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:15,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:15,322 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:15,322 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:15,326 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1700385571] [2023-11-21 22:25:15,327 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1700385571] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:15,327 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:15,327 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:15,328 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [623678313] [2023-11-21 22:25:15,328 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:15,328 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:15,329 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:15,329 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:25:15,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:25:15,334 INFO L87 Difference]: Start difference. First operand 15895 states and 29559 transitions. cyclomatic complexity: 13665 Second operand has 3 states, 3 states have (on average 14.0) internal successors, (42), 3 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:15,900 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:15,900 INFO L93 Difference]: Finished difference Result 15901 states and 29421 transitions. [2023-11-21 22:25:15,900 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15901 states and 29421 transitions. [2023-11-21 22:25:15,974 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8736 [2023-11-21 22:25:16,190 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15901 states to 15901 states and 29421 transitions. [2023-11-21 22:25:16,190 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15901 [2023-11-21 22:25:16,203 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15901 [2023-11-21 22:25:16,203 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15901 states and 29421 transitions. [2023-11-21 22:25:16,218 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:16,219 INFO L218 hiAutomatonCegarLoop]: Abstraction has 15901 states and 29421 transitions. [2023-11-21 22:25:16,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15901 states and 29421 transitions. [2023-11-21 22:25:16,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15901 to 15895. [2023-11-21 22:25:16,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15895 states, 15895 states have (on average 1.8505819440075495) internal successors, (29415), 15894 states have internal predecessors, (29415), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:16,518 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15895 states to 15895 states and 29415 transitions. [2023-11-21 22:25:16,518 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15895 states and 29415 transitions. [2023-11-21 22:25:16,519 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:25:16,521 INFO L428 stractBuchiCegarLoop]: Abstraction has 15895 states and 29415 transitions. [2023-11-21 22:25:16,521 INFO L335 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2023-11-21 22:25:16,521 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15895 states and 29415 transitions. [2023-11-21 22:25:16,587 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8732 [2023-11-21 22:25:16,587 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:16,588 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:16,598 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:16,598 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:16,599 INFO L748 eck$LassoCheckResult]: Stem: 133655#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 133656#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 134886#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 134379#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 134380#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 133828#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 133829#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 135560#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 135729#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 133680#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 133681#L1463 assume 0 == initPersonOnFloor_~floor#1; 135849#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 133605#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 134531#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 133346#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 133347#L1255 assume !(0 == callOnFloor_~floorID#1); 135202#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 133951#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 136306#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 136305#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 136301#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 136298#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 136297#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 136189#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 136185#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 136182#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 136178#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 136177#L1255-2 assume !(0 == callOnFloor_~floorID#1); 136176#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 136172#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 136171#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 136170#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 136168#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 136167#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 136166#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 136146#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 136141#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 136137#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 136135#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 136133#L2908 assume !(0 != timeShift_~tmp___9~2#1); 136131#L2999 assume !(1 == ~doorState~0); 136129#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 136123#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 136018#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 136004#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 135994#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 135986#L2727 assume !(1 == ~currentHeading~0); 135977#L2737 assume !(0 == ~currentFloorID~0); 135973#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 135969#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 135967#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 135965#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 135963#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 135955#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 135956#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 135915#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 135907#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 135908#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 136689#L707-2 [2023-11-21 22:25:16,600 INFO L750 eck$LassoCheckResult]: Loop: 136689#L707-2 assume !false; 136688#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 136687#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 136686#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 136685#L715 assume 1 != cleanup_~tmp___0~2#1; 136684#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 136683#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 136682#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 136680#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 136678#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 136677#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 136676#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 136672#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 136625#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 136622#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 136621#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 136616#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 136613#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 136612#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 136611#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 136609#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 136605#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 136603#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 136602#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 136600#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 136599#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 136598#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 136596#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 136460#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 136446#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 136436#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 136428#L2727-3 assume !(1 == ~currentHeading~0); 136419#L2737-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 136415#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 136410#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 136411#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 136708#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 136707#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 136706#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 136705#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 136696#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 136691#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 136690#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 136689#L707-2 [2023-11-21 22:25:16,600 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:16,601 INFO L85 PathProgramCache]: Analyzing trace with hash -859025896, now seen corresponding path program 4 times [2023-11-21 22:25:16,601 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:16,601 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1485458432] [2023-11-21 22:25:16,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:16,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:16,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:16,726 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:16,726 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:16,726 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1485458432] [2023-11-21 22:25:16,727 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1485458432] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:16,727 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:16,727 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:16,727 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48275890] [2023-11-21 22:25:16,727 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:16,728 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:16,728 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:16,728 INFO L85 PathProgramCache]: Analyzing trace with hash 633024870, now seen corresponding path program 1 times [2023-11-21 22:25:16,729 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:16,729 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1112762889] [2023-11-21 22:25:16,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:16,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:16,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:16,778 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:16,778 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:16,778 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1112762889] [2023-11-21 22:25:16,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1112762889] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:16,779 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:16,779 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:25:16,779 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1394337907] [2023-11-21 22:25:16,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:16,780 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:16,780 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:16,781 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:25:16,781 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:25:16,781 INFO L87 Difference]: Start difference. First operand 15895 states and 29415 transitions. cyclomatic complexity: 13521 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:17,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:17,210 INFO L93 Difference]: Finished difference Result 23923 states and 44146 transitions. [2023-11-21 22:25:17,210 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23923 states and 44146 transitions. [2023-11-21 22:25:17,285 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 16484 [2023-11-21 22:25:17,366 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23923 states to 23923 states and 44146 transitions. [2023-11-21 22:25:17,367 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23923 [2023-11-21 22:25:17,388 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23923 [2023-11-21 22:25:17,388 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23923 states and 44146 transitions. [2023-11-21 22:25:17,416 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:17,416 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23923 states and 44146 transitions. [2023-11-21 22:25:17,435 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23923 states and 44146 transitions. [2023-11-21 22:25:17,836 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23923 to 15913. [2023-11-21 22:25:17,854 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15913 states, 15913 states have (on average 1.8496198077043926) internal successors, (29433), 15912 states have internal predecessors, (29433), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:17,899 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15913 states to 15913 states and 29433 transitions. [2023-11-21 22:25:17,899 INFO L240 hiAutomatonCegarLoop]: Abstraction has 15913 states and 29433 transitions. [2023-11-21 22:25:17,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:25:17,901 INFO L428 stractBuchiCegarLoop]: Abstraction has 15913 states and 29433 transitions. [2023-11-21 22:25:17,901 INFO L335 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2023-11-21 22:25:17,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 15913 states and 29433 transitions. [2023-11-21 22:25:17,952 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8744 [2023-11-21 22:25:17,952 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:17,952 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:17,955 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:17,955 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:17,956 INFO L748 eck$LassoCheckResult]: Stem: 173489#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 173490#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 174739#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 174223#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 174224#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 173665#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 173666#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 175452#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 175643#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 173514#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 173515#L1463 assume 0 == initPersonOnFloor_~floor#1; 175805#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 173440#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 174380#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 173175#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 173176#L1255 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 175070#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 174849#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 173989#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 173899#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 173900#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 173929#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 173936#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 173238#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 173239#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 175036#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 175037#L1255-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 174375#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 174854#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 174855#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 175343#L1188 assume !(0 == isFloorCalling_~floorID#1); 175344#L1192 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 174189#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 175923#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 175925#L2164 assume !(0 == buttonForFloorIsPressed_~floorID#1); 178391#L2168 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 178385#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 176308#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 176306#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 176304#L2908 assume !(0 != timeShift_~tmp___9~2#1); 176303#L2999 assume !(1 == ~doorState~0); 176302#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 176301#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 175606#L2520 assume !(0 == ~currentFloorID~0); 175607#L2526 assume !(~currentFloorID~0 > 0); 175721#$Ultimate##2398 assume ~currentFloorID~0 > 0; 175722#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 175122#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 175124#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 185017#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 175387#L2727 assume !(1 == ~currentHeading~0); 175388#L2737 assume !(0 == ~currentFloorID~0); 175539#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 173366#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 173367#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 174943#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 174292#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 174293#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 174491#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 174492#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 173415#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 175630#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 185364#L707-2 [2023-11-21 22:25:17,956 INFO L750 eck$LassoCheckResult]: Loop: 185364#L707-2 assume !false; 185362#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 185360#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 185358#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 185356#L715 assume 1 != cleanup_~tmp___0~2#1; 185354#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 185352#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 185350#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 185348#L2255 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 176104#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 185346#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 185344#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 185337#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 174436#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 174006#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 185050#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 185049#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 174346#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 173180#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 174273#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 185099#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 188704#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 173915#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 173916#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 173406#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 173407#L2520-2 assume !(0 == ~currentFloorID~0); 174231#L2526-2 assume !(~currentFloorID~0 > 0); 175025#$Ultimate##4992 assume ~currentFloorID~0 > 0; 175573#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 175598#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 175026#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 186388#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 185104#L2727-3 assume !(1 == ~currentHeading~0); 185103#L2737-9 assume !(0 == ~currentFloorID~0); 185100#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 185101#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 185390#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 185388#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 185386#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 185387#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 185385#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 185377#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 185370#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 185367#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 185364#L707-2 [2023-11-21 22:25:17,957 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:17,957 INFO L85 PathProgramCache]: Analyzing trace with hash 1266470023, now seen corresponding path program 1 times [2023-11-21 22:25:17,957 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:17,958 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [316579653] [2023-11-21 22:25:17,958 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:17,959 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:17,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:18,045 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:18,045 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:18,046 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [316579653] [2023-11-21 22:25:18,050 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [316579653] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:18,051 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:18,051 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:18,051 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1092364835] [2023-11-21 22:25:18,051 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:18,052 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:18,052 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:18,052 INFO L85 PathProgramCache]: Analyzing trace with hash 1859070901, now seen corresponding path program 1 times [2023-11-21 22:25:18,054 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:18,055 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [607315532] [2023-11-21 22:25:18,055 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:18,055 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:18,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:18,139 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:18,140 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:18,140 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [607315532] [2023-11-21 22:25:18,142 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [607315532] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:18,142 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:18,142 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:25:18,143 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1506105899] [2023-11-21 22:25:18,143 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:18,143 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:18,143 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:18,144 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:25:18,144 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:25:18,144 INFO L87 Difference]: Start difference. First operand 15913 states and 29433 transitions. cyclomatic complexity: 13521 Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:19,465 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:19,465 INFO L93 Difference]: Finished difference Result 23725 states and 43604 transitions. [2023-11-21 22:25:19,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 23725 states and 43604 transitions. [2023-11-21 22:25:19,544 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13070 [2023-11-21 22:25:19,618 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 23725 states to 23725 states and 43604 transitions. [2023-11-21 22:25:19,619 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 23725 [2023-11-21 22:25:19,639 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 23725 [2023-11-21 22:25:19,639 INFO L73 IsDeterministic]: Start isDeterministic. Operand 23725 states and 43604 transitions. [2023-11-21 22:25:19,868 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:19,868 INFO L218 hiAutomatonCegarLoop]: Abstraction has 23725 states and 43604 transitions. [2023-11-21 22:25:19,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 23725 states and 43604 transitions. [2023-11-21 22:25:20,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 23725 to 23553. [2023-11-21 22:25:20,204 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 23553 states, 23553 states have (on average 1.8395958052052817) internal successors, (43328), 23552 states have internal predecessors, (43328), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:20,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 23553 states to 23553 states and 43328 transitions. [2023-11-21 22:25:20,287 INFO L240 hiAutomatonCegarLoop]: Abstraction has 23553 states and 43328 transitions. [2023-11-21 22:25:20,287 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2023-11-21 22:25:20,288 INFO L428 stractBuchiCegarLoop]: Abstraction has 23553 states and 43328 transitions. [2023-11-21 22:25:20,288 INFO L335 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2023-11-21 22:25:20,289 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 23553 states and 43328 transitions. [2023-11-21 22:25:20,583 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12984 [2023-11-21 22:25:20,584 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:20,584 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:20,588 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:20,598 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:20,599 INFO L748 eck$LassoCheckResult]: Stem: 213127#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 213128#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 214375#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 213853#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 213854#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 213297#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 213298#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 215108#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 215290#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 213152#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 213153#L1463 assume 0 == initPersonOnFloor_~floor#1; 215440#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 213077#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 214010#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 212819#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 212820#L1255 assume !(0 == callOnFloor_~floorID#1); 214709#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 213416#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 215586#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 215585#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 215581#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 215578#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 215576#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 212929#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 212783#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 215424#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 213399#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 214925#L1255-2 assume !(0 == callOnFloor_~floorID#1); 214926#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 212913#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 212914#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 214120#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 214121#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 215542#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 215540#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 215536#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 215537#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 215748#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 215747#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 215745#L2908 assume !(0 != timeShift_~tmp___9~2#1); 215744#L2999 assume !(1 == ~doorState~0); 215743#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 215741#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 215742#L2520 assume !(0 == ~currentFloorID~0); 215514#L2526 assume !(~currentFloorID~0 > 0); 215509#$Ultimate##2398 assume ~currentFloorID~0 > 0; 215508#L2543 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 215506#L2544 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 215507#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 216244#L3007 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 235452#L2727 assume !(1 == ~currentHeading~0); 235443#L2737 assume !(0 == ~currentFloorID~0); 235428#L2737-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 235423#L2743-1 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 235421#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 235419#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 235414#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 235415#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 235406#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 235385#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 235378#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 235376#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 235303#L707-2 [2023-11-21 22:25:20,599 INFO L750 eck$LassoCheckResult]: Loop: 235303#L707-2 assume !false; 235256#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 235251#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 235247#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 235244#L715 assume 1 != cleanup_~tmp___0~2#1; 235241#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 235230#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 235220#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 234270#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 234269#L2259 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 216389#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 234266#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 234265#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 234264#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 234263#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 234255#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 214453#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 214455#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 234259#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 234257#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 234258#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 236220#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 213540#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 213541#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 213044#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 213045#L2520-2 assume !(0 == ~currentFloorID~0); 235683#L2526-2 assume !(~currentFloorID~0 > 0); 234655#$Ultimate##4992 assume ~currentFloorID~0 > 0; 235681#L2543-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 215389#L2544-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 213019#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 214688#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 236083#L2727-3 assume !(1 == ~currentHeading~0); 215061#L2737-9 assume !(0 == ~currentFloorID~0); 214348#L2737-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 214349#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 235427#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 235422#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 235420#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 235418#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 235413#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 235396#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 235379#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 235377#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 235303#L707-2 [2023-11-21 22:25:20,600 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:20,600 INFO L85 PathProgramCache]: Analyzing trace with hash -1473127167, now seen corresponding path program 1 times [2023-11-21 22:25:20,600 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:20,601 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [50715914] [2023-11-21 22:25:20,601 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:20,602 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:20,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:20,685 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:20,686 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:20,686 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [50715914] [2023-11-21 22:25:20,686 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [50715914] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:20,686 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:20,686 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:20,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287840505] [2023-11-21 22:25:20,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:20,687 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:20,688 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:20,688 INFO L85 PathProgramCache]: Analyzing trace with hash 1168663800, now seen corresponding path program 1 times [2023-11-21 22:25:20,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:20,688 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1457953732] [2023-11-21 22:25:20,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:20,689 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:20,702 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:20,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:20,743 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:20,743 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1457953732] [2023-11-21 22:25:20,743 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1457953732] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:20,743 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:20,743 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:20,744 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1879785993] [2023-11-21 22:25:20,744 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:20,744 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:20,744 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:20,745 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:20,745 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:20,745 INFO L87 Difference]: Start difference. First operand 23553 states and 43328 transitions. cyclomatic complexity: 19776 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:21,905 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:21,905 INFO L93 Difference]: Finished difference Result 16396 states and 30033 transitions. [2023-11-21 22:25:21,905 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16396 states and 30033 transitions. [2023-11-21 22:25:21,957 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13037 [2023-11-21 22:25:22,004 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16396 states to 16396 states and 30033 transitions. [2023-11-21 22:25:22,004 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16396 [2023-11-21 22:25:22,017 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16396 [2023-11-21 22:25:22,017 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16396 states and 30033 transitions. [2023-11-21 22:25:22,028 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:22,028 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16396 states and 30033 transitions. [2023-11-21 22:25:22,041 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16396 states and 30033 transitions. [2023-11-21 22:25:22,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16396 to 16387. [2023-11-21 22:25:22,196 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16387 states, 16387 states have (on average 1.8318179044364435) internal successors, (30018), 16386 states have internal predecessors, (30018), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:22,246 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16387 states to 16387 states and 30018 transitions. [2023-11-21 22:25:22,246 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16387 states and 30018 transitions. [2023-11-21 22:25:22,247 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2023-11-21 22:25:22,249 INFO L428 stractBuchiCegarLoop]: Abstraction has 16387 states and 30018 transitions. [2023-11-21 22:25:22,249 INFO L335 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2023-11-21 22:25:22,249 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16387 states and 30018 transitions. [2023-11-21 22:25:22,376 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13028 [2023-11-21 22:25:22,377 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:22,377 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:22,378 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:22,379 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:22,379 INFO L748 eck$LassoCheckResult]: Stem: 253063#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 253064#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 254207#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 253734#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 253735#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 253217#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 253218#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 254836#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 255002#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 253085#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 253086#L1463 assume 0 == initPersonOnFloor_~floor#1; 255120#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 253019#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 253880#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 252775#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 252776#L1255 assume !(0 == callOnFloor_~floorID#1); 254499#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 253327#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 255233#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 255232#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 255228#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 255223#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 255221#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 255193#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 255189#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 255187#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 255183#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 255182#L1255-2 assume !(0 == callOnFloor_~floorID#1); 255181#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 255177#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 255176#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 255175#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 255174#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 255173#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 255172#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 253466#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 253467#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 254325#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 255035#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 255234#L2908 assume !(0 != timeShift_~tmp___9~2#1); 255073#L2999 assume !(1 == ~doorState~0); 254232#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 253828#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 253829#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 254855#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 254417#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 254418#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 254616#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 254461#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 253906#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 253827#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 254608#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 253173#L2727-2 assume !(1 == ~currentHeading~0); 252984#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 252985#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 254095#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 252951#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 262725#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 262721#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 262722#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 262717#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 262674#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 262665#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 262661#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 262659#L707-2 [2023-11-21 22:25:22,381 INFO L750 eck$LassoCheckResult]: Loop: 262659#L707-2 assume !false; 262657#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 262648#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 262649#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 262639#L715 assume 1 != cleanup_~tmp___0~2#1; 262640#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 259165#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 259166#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 255411#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 255412#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 262653#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 268969#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 268965#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 268950#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 268945#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 268944#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 268943#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 268942#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 255357#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 255356#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 255354#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 255349#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 255347#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 255346#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 255344#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 255343#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 255342#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 255340#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 255341#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 253450#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 268142#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 268141#L2782-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~24#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 268140#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 268139#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 253074#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 253075#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 268081#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 268079#L2727-5 assume !(1 == ~currentHeading~0); 268032#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 262846#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 262833#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 262830#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 262828#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 262827#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 262826#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 262825#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 262685#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 262666#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 262662#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 262659#L707-2 [2023-11-21 22:25:22,381 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:22,382 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 1 times [2023-11-21 22:25:22,382 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:22,382 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1237377072] [2023-11-21 22:25:22,382 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:22,382 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:22,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,455 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:22,456 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:22,456 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1237377072] [2023-11-21 22:25:22,456 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1237377072] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:22,456 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:22,456 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:22,456 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1272855894] [2023-11-21 22:25:22,457 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:22,458 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:22,458 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:22,458 INFO L85 PathProgramCache]: Analyzing trace with hash 1664429457, now seen corresponding path program 1 times [2023-11-21 22:25:22,459 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:22,459 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1191132928] [2023-11-21 22:25:22,459 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:22,459 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:22,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:22,512 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:22,513 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:22,513 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1191132928] [2023-11-21 22:25:22,513 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1191132928] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:22,513 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:22,513 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:25:22,513 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [626559453] [2023-11-21 22:25:22,514 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:22,514 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:22,514 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:22,514 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:25:22,514 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:25:22,515 INFO L87 Difference]: Start difference. First operand 16387 states and 30018 transitions. cyclomatic complexity: 13632 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:22,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:22,712 INFO L93 Difference]: Finished difference Result 29240 states and 53459 transitions. [2023-11-21 22:25:22,712 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29240 states and 53459 transitions. [2023-11-21 22:25:22,958 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25786 [2023-11-21 22:25:23,040 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29240 states to 29240 states and 53459 transitions. [2023-11-21 22:25:23,041 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29240 [2023-11-21 22:25:23,067 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29240 [2023-11-21 22:25:23,067 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29240 states and 53459 transitions. [2023-11-21 22:25:23,091 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:23,091 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29240 states and 53459 transitions. [2023-11-21 22:25:23,111 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29240 states and 53459 transitions. [2023-11-21 22:25:23,396 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29240 to 16407. [2023-11-21 22:25:23,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16407 states, 16407 states have (on average 1.8308039251538977) internal successors, (30038), 16406 states have internal predecessors, (30038), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:23,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16407 states to 16407 states and 30038 transitions. [2023-11-21 22:25:23,482 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16407 states and 30038 transitions. [2023-11-21 22:25:23,482 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:25:23,483 INFO L428 stractBuchiCegarLoop]: Abstraction has 16407 states and 30038 transitions. [2023-11-21 22:25:23,483 INFO L335 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2023-11-21 22:25:23,484 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16407 states and 30038 transitions. [2023-11-21 22:25:23,552 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13046 [2023-11-21 22:25:23,552 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:23,553 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:23,555 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:23,555 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:23,555 INFO L748 eck$LassoCheckResult]: Stem: 298699#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 298700#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 299868#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 299377#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 299378#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 298852#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 298853#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 300537#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 300725#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 298721#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 298722#L1463 assume 0 == initPersonOnFloor_~floor#1; 300869#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 298655#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 299529#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 298412#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 298413#L1255 assume !(0 == callOnFloor_~floorID#1); 300179#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 298963#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 300990#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 300989#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 300985#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 300982#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 300980#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 300954#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 300950#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 300948#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 300944#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 300943#L1255-2 assume !(0 == callOnFloor_~floorID#1); 300942#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 300938#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 300937#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 300936#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 300935#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 300934#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 300933#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 299104#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 299105#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 299992#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 300768#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 300992#L2908 assume !(0 != timeShift_~tmp___9~2#1); 300817#L2999 assume !(1 == ~doorState~0); 299894#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 299477#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 299478#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 300557#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 300090#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 300091#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 300512#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 300931#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 299555#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 299476#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 300293#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 298808#L2727-2 assume !(1 == ~currentHeading~0); 298620#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 298621#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 299755#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 298587#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 313111#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 313072#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 313071#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 313070#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 300009#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 298631#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 313042#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 313041#L707-2 [2023-11-21 22:25:23,556 INFO L750 eck$LassoCheckResult]: Loop: 313041#L707-2 assume !false; 313040#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 313039#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 313038#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 313037#L715 assume 1 != cleanup_~tmp___0~2#1; 313036#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 313035#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 313034#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 313033#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 312980#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 300547#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 300548#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 301145#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 301146#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 301129#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 301130#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 301125#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 301126#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 301123#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 301122#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 301121#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 301120#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 301118#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 301117#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 301115#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 301114#L2999-3 assume 1 == ~doorState~0;~doorState~0 := 0; 301099#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 301082#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 301069#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 301059#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 301055#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 299463#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 299465#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 306185#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 298710#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 298711#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 313114#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 313104#L2727-5 assume !(1 == ~currentHeading~0); 313098#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 313094#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 313091#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 313089#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 313088#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 313085#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 313086#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 313087#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 313060#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 313044#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 313043#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 313041#L707-2 [2023-11-21 22:25:23,557 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:23,557 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 2 times [2023-11-21 22:25:23,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:23,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259042047] [2023-11-21 22:25:23,558 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:23,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:23,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,701 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:23,701 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:23,701 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259042047] [2023-11-21 22:25:23,702 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259042047] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:23,702 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:23,702 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:23,702 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [578520921] [2023-11-21 22:25:23,702 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:23,703 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:23,703 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:23,703 INFO L85 PathProgramCache]: Analyzing trace with hash -329715249, now seen corresponding path program 1 times [2023-11-21 22:25:23,704 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:23,704 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [9342047] [2023-11-21 22:25:23,704 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:23,704 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:23,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:23,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:23,787 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:23,787 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [9342047] [2023-11-21 22:25:23,787 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [9342047] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:23,787 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:23,788 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:23,788 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511548366] [2023-11-21 22:25:23,788 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:23,788 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:23,789 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:23,789 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:23,790 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:23,790 INFO L87 Difference]: Start difference. First operand 16407 states and 30038 transitions. cyclomatic complexity: 13632 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:24,280 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:24,280 INFO L93 Difference]: Finished difference Result 33906 states and 61146 transitions. [2023-11-21 22:25:24,280 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33906 states and 61146 transitions. [2023-11-21 22:25:24,402 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 30272 [2023-11-21 22:25:24,486 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33906 states to 33906 states and 61146 transitions. [2023-11-21 22:25:24,486 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33906 [2023-11-21 22:25:24,509 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33906 [2023-11-21 22:25:24,509 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33906 states and 61146 transitions. [2023-11-21 22:25:24,525 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:24,525 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33906 states and 61146 transitions. [2023-11-21 22:25:24,541 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33906 states and 61146 transitions. [2023-11-21 22:25:25,000 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33906 to 18557. [2023-11-21 22:25:25,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 18557 states, 18557 states have (on average 1.808050870291534) internal successors, (33552), 18556 states have internal predecessors, (33552), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:25,059 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18557 states to 18557 states and 33552 transitions. [2023-11-21 22:25:25,059 INFO L240 hiAutomatonCegarLoop]: Abstraction has 18557 states and 33552 transitions. [2023-11-21 22:25:25,060 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2023-11-21 22:25:25,060 INFO L428 stractBuchiCegarLoop]: Abstraction has 18557 states and 33552 transitions. [2023-11-21 22:25:25,060 INFO L335 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2023-11-21 22:25:25,060 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18557 states and 33552 transitions. [2023-11-21 22:25:25,103 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15033 [2023-11-21 22:25:25,103 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:25,103 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:25,105 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:25,105 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:25,105 INFO L748 eck$LassoCheckResult]: Stem: 349028#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 349029#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 350186#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 349709#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 349710#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 349184#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 349185#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 350858#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 351055#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 349050#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 349051#L1463 assume 0 == initPersonOnFloor_~floor#1; 351206#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 348983#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 349864#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 348739#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 348740#L1255 assume !(0 == callOnFloor_~floorID#1); 350499#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 349295#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 351327#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 351326#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 351322#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 351319#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 351317#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 351291#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 348792#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 348793#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 351281#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 351280#L1255-2 assume !(0 == callOnFloor_~floorID#1); 351279#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 351275#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 351274#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 351273#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 351272#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 351271#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 351270#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 349434#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 349435#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 350309#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 351099#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 351286#L2908 assume !(0 != timeShift_~tmp___9~2#1); 351143#L2999 assume !(1 == ~doorState~0); 351144#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353357#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 353358#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 350940#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 350941#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 353337#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 353336#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353335#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 353334#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 353328#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 353327#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 353325#L2727-2 assume !(1 == ~currentHeading~0); 348948#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 348949#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 351083#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 348915#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 351368#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 351363#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 351364#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 351359#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 351360#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 354159#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 354158#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 354154#L707-2 [2023-11-21 22:25:25,106 INFO L750 eck$LassoCheckResult]: Loop: 354154#L707-2 assume !false; 354152#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 354147#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 354145#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 354144#L715 assume 1 != cleanup_~tmp___0~2#1; 354143#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 354142#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 354141#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 354139#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 354137#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 354136#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 354135#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 354127#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 354103#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 354076#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 354069#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 354062#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 354046#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 354044#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 354043#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 354042#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 354041#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 354038#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 354036#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 354034#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 354031#L2999-3 assume !(1 == ~doorState~0); 354029#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353986#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 353979#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 353478#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 353974#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 353453#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 353541#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 353539#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 353499#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 353463#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 353456#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 353446#L2727-5 assume !(1 == ~currentHeading~0); 353437#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 353432#L2737-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 353428#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 353427#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 359788#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 359786#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 359785#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 353419#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 353420#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 354177#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 354157#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 354154#L707-2 [2023-11-21 22:25:25,106 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:25,107 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 3 times [2023-11-21 22:25:25,107 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:25,107 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [639393748] [2023-11-21 22:25:25,107 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:25,107 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:25,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:25,179 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:25,179 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:25,180 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [639393748] [2023-11-21 22:25:25,180 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [639393748] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:25,180 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:25,180 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:25,180 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [998398269] [2023-11-21 22:25:25,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:25,181 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:25,181 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:25,181 INFO L85 PathProgramCache]: Analyzing trace with hash -463728755, now seen corresponding path program 1 times [2023-11-21 22:25:25,182 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:25,182 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [883921970] [2023-11-21 22:25:25,182 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:25,182 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:25,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:25,275 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:25,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:25,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [883921970] [2023-11-21 22:25:25,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [883921970] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:25,276 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:25,276 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:25:25,276 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909107579] [2023-11-21 22:25:25,276 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:25,276 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:25,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:25,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:25:25,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:25:25,277 INFO L87 Difference]: Start difference. First operand 18557 states and 33552 transitions. cyclomatic complexity: 14996 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:27,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:27,305 INFO L93 Difference]: Finished difference Result 30691 states and 54932 transitions. [2023-11-21 22:25:27,305 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 30691 states and 54932 transitions. [2023-11-21 22:25:27,469 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27095 [2023-11-21 22:25:27,579 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 30691 states to 30691 states and 54932 transitions. [2023-11-21 22:25:27,579 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 30691 [2023-11-21 22:25:27,606 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 30691 [2023-11-21 22:25:27,608 INFO L73 IsDeterministic]: Start isDeterministic. Operand 30691 states and 54932 transitions. [2023-11-21 22:25:27,946 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:27,946 INFO L218 hiAutomatonCegarLoop]: Abstraction has 30691 states and 54932 transitions. [2023-11-21 22:25:27,959 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 30691 states and 54932 transitions. [2023-11-21 22:25:28,302 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 30691 to 27563. [2023-11-21 22:25:28,328 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 27563 states, 27563 states have (on average 1.8099263505423937) internal successors, (49887), 27562 states have internal predecessors, (49887), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:28,424 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 27563 states to 27563 states and 49887 transitions. [2023-11-21 22:25:28,425 INFO L240 hiAutomatonCegarLoop]: Abstraction has 27563 states and 49887 transitions. [2023-11-21 22:25:28,425 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2023-11-21 22:25:28,427 INFO L428 stractBuchiCegarLoop]: Abstraction has 27563 states and 49887 transitions. [2023-11-21 22:25:28,427 INFO L335 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2023-11-21 22:25:28,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 27563 states and 49887 transitions. [2023-11-21 22:25:28,538 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23991 [2023-11-21 22:25:28,539 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:28,539 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:28,541 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:28,542 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:28,542 INFO L748 eck$LassoCheckResult]: Stem: 398296#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 398297#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 399482#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 398984#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 398985#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 398454#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 398455#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 400171#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 400386#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 398318#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 398319#L1463 assume 0 == initPersonOnFloor_~floor#1; 400552#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 398252#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 399141#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 398007#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 398008#L1255 assume !(0 == callOnFloor_~floorID#1); 399801#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 398567#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 400691#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 400690#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 400686#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 400682#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 400679#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 400651#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 398061#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 398062#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 400641#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 400640#L1255-2 assume !(0 == callOnFloor_~floorID#1); 400639#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 400635#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 400634#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 400633#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 400632#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 400631#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 400630#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 398709#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 398710#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 399607#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 400437#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 400646#L2908 assume !(0 != timeShift_~tmp___9~2#1); 400491#L2999 assume !(1 == ~doorState~0); 399510#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 399089#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 399090#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 400195#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 399706#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 399707#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 400147#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 400905#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 400904#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 400893#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 400891#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 400892#L2727-2 assume !(1 == ~currentHeading~0); 398217#L2737-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 398218#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 400417#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 398184#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 405665#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 405663#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 405664#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 405636#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 405629#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 405567#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 405564#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 405562#L707-2 [2023-11-21 22:25:28,543 INFO L750 eck$LassoCheckResult]: Loop: 405562#L707-2 assume !false; 405560#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 405558#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 405556#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 405552#L715 assume 1 != cleanup_~tmp___0~2#1; 405548#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 405545#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 405542#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 405537#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 405381#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 405382#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 405368#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 405354#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 405355#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 405321#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 405322#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 405311#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 405312#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 405466#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 405464#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 405462#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 405460#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 405457#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 405455#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 405452#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 405449#L2999-3 assume !(1 == ~doorState~0); 405450#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 423555#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 423556#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 423552#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 423657#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 423480#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 423481#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 425376#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 425375#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 399060#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 425361#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 425362#L2727-5 assume !(1 == ~currentHeading~0); 425414#L2737-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 400072#L2737-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 407532#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 405659#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 405652#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 405650#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 405649#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 405648#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 405617#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 405568#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 405565#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 405562#L707-2 [2023-11-21 22:25:28,544 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:28,544 INFO L85 PathProgramCache]: Analyzing trace with hash -2087150209, now seen corresponding path program 4 times [2023-11-21 22:25:28,544 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:28,544 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1630939383] [2023-11-21 22:25:28,545 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:28,545 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:28,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:28,649 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:28,649 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:28,650 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1630939383] [2023-11-21 22:25:28,650 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1630939383] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:28,650 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:28,650 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:28,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [511799352] [2023-11-21 22:25:28,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:28,652 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:28,652 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:28,652 INFO L85 PathProgramCache]: Analyzing trace with hash -856755765, now seen corresponding path program 1 times [2023-11-21 22:25:28,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:28,653 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [190924548] [2023-11-21 22:25:28,653 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:28,653 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:28,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:28,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:28,687 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:28,687 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [190924548] [2023-11-21 22:25:28,687 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [190924548] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:28,688 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:28,688 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:28,688 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1671354140] [2023-11-21 22:25:28,688 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:28,689 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:28,689 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:28,690 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2023-11-21 22:25:28,690 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2023-11-21 22:25:28,690 INFO L87 Difference]: Start difference. First operand 27563 states and 49887 transitions. cyclomatic complexity: 22325 Second operand has 3 states, 3 states have (on average 16.333333333333332) internal successors, (49), 3 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:29,009 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:29,010 INFO L93 Difference]: Finished difference Result 43518 states and 78461 transitions. [2023-11-21 22:25:29,010 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 43518 states and 78461 transitions. [2023-11-21 22:25:29,532 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 39944 [2023-11-21 22:25:29,624 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 43518 states to 43518 states and 78461 transitions. [2023-11-21 22:25:29,624 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 43518 [2023-11-21 22:25:29,651 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 43518 [2023-11-21 22:25:29,651 INFO L73 IsDeterministic]: Start isDeterministic. Operand 43518 states and 78461 transitions. [2023-11-21 22:25:29,669 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:29,670 INFO L218 hiAutomatonCegarLoop]: Abstraction has 43518 states and 78461 transitions. [2023-11-21 22:25:29,689 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 43518 states and 78461 transitions. [2023-11-21 22:25:30,050 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 43518 to 43478. [2023-11-21 22:25:30,079 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43478 states, 43478 states have (on average 1.8032798196789181) internal successors, (78403), 43477 states have internal predecessors, (78403), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:30,581 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43478 states to 43478 states and 78403 transitions. [2023-11-21 22:25:30,581 INFO L240 hiAutomatonCegarLoop]: Abstraction has 43478 states and 78403 transitions. [2023-11-21 22:25:30,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2023-11-21 22:25:30,584 INFO L428 stractBuchiCegarLoop]: Abstraction has 43478 states and 78403 transitions. [2023-11-21 22:25:30,584 INFO L335 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2023-11-21 22:25:30,584 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 43478 states and 78403 transitions. [2023-11-21 22:25:30,676 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 39904 [2023-11-21 22:25:30,676 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:30,676 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:30,678 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:30,679 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:30,679 INFO L748 eck$LassoCheckResult]: Stem: 469381#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 469382#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 470555#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 470065#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 470066#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 469534#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 469535#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 471253#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 471454#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 469403#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 469404#L1463 assume 0 == initPersonOnFloor_~floor#1; 471621#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 469337#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 470222#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 469095#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 469096#L1255 assume !(0 == callOnFloor_~floorID#1); 470876#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 469647#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 471750#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 471749#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 471743#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 471740#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 471738#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 471710#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 471706#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 471704#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 471700#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 471699#L1255-2 assume !(0 == callOnFloor_~floorID#1); 471698#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 471694#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 471693#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 471692#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 471691#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 471690#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 471689#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 469789#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 469790#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 470683#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 471512#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 471751#L2908 assume !(0 != timeShift_~tmp___9~2#1); 471564#L2999 assume !(1 == ~doorState~0); 470582#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 470165#L2351 assume !(1 == stopRequestedInDirection_~dir#1); 470166#L2520 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 471273#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 470785#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 470786#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 471223#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 471753#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 471754#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 470988#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 470989#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 469490#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 469491#isTopFloor_returnLabel#5 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 471608#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 471609#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 471490#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 469271#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 471877#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 471878#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 482894#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 482892#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 482875#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 482858#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482855#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 482854#L707-2 [2023-11-21 22:25:30,679 INFO L750 eck$LassoCheckResult]: Loop: 482854#L707-2 assume !false; 482853#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 482852#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 482847#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 482845#L715 assume 1 != cleanup_~tmp___0~2#1; 482844#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 482843#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 482842#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 482840#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 482838#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 482837#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 482836#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 482832#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 482221#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 482215#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 482213#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 482211#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 482210#L1188-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 482208#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 482207#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 482206#L2164-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 482201#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 482198#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 482197#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 482195#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 482193#L2999-3 assume !(1 == ~doorState~0); 482192#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 482190#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 482191#L2520-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 482159#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 484857#L3007-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 482142#L2782-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 484855#getReverseHeading_returnLabel#3 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 484853#L2351-3 assume !(1 == stopRequestedInDirection_~dir#1); 484852#L2520-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 482881#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 482162#L3016-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 482145#L2727-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 473891#isTopFloor_returnLabel#10 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 473874#L2731-15 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 473858#L2737-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 473860#L2743-11 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 482917#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 482916#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 482913#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 482914#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 482915#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 482864#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 482857#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 482856#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 482854#L707-2 [2023-11-21 22:25:30,680 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:30,680 INFO L85 PathProgramCache]: Analyzing trace with hash -2108163676, now seen corresponding path program 1 times [2023-11-21 22:25:30,680 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:30,680 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1757233435] [2023-11-21 22:25:30,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:30,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:30,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:30,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:30,774 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:30,774 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1757233435] [2023-11-21 22:25:30,774 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1757233435] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:30,774 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:30,774 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:30,774 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [870981119] [2023-11-21 22:25:30,775 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:30,775 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:30,775 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:30,775 INFO L85 PathProgramCache]: Analyzing trace with hash 1674331560, now seen corresponding path program 1 times [2023-11-21 22:25:30,775 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:30,776 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2128857526] [2023-11-21 22:25:30,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:30,776 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:30,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:30,850 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:30,850 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:30,850 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2128857526] [2023-11-21 22:25:30,850 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2128857526] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:30,850 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:30,851 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2023-11-21 22:25:30,851 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1595376032] [2023-11-21 22:25:30,851 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:30,851 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:30,852 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:30,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2023-11-21 22:25:30,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2023-11-21 22:25:30,852 INFO L87 Difference]: Start difference. First operand 43478 states and 78403 transitions. cyclomatic complexity: 34926 Second operand has 4 states, 4 states have (on average 12.5) internal successors, (50), 4 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:31,208 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:31,208 INFO L93 Difference]: Finished difference Result 44508 states and 79891 transitions. [2023-11-21 22:25:31,209 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44508 states and 79891 transitions. [2023-11-21 22:25:31,441 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 40780 [2023-11-21 22:25:31,972 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44508 states to 44482 states and 79855 transitions. [2023-11-21 22:25:31,986 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44482 [2023-11-21 22:25:32,032 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44482 [2023-11-21 22:25:32,046 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44482 states and 79855 transitions. [2023-11-21 22:25:32,061 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:32,061 INFO L218 hiAutomatonCegarLoop]: Abstraction has 44482 states and 79855 transitions. [2023-11-21 22:25:32,083 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44482 states and 79855 transitions. [2023-11-21 22:25:32,375 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44482 to 44362. [2023-11-21 22:25:32,407 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 44362 states, 44362 states have (on average 1.7969207880618547) internal successors, (79715), 44361 states have internal predecessors, (79715), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:32,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44362 states to 44362 states and 79715 transitions. [2023-11-21 22:25:32,500 INFO L240 hiAutomatonCegarLoop]: Abstraction has 44362 states and 79715 transitions. [2023-11-21 22:25:32,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2023-11-21 22:25:32,501 INFO L428 stractBuchiCegarLoop]: Abstraction has 44362 states and 79715 transitions. [2023-11-21 22:25:32,501 INFO L335 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2023-11-21 22:25:32,501 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 44362 states and 79715 transitions. [2023-11-21 22:25:32,631 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 40664 [2023-11-21 22:25:32,631 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:32,632 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:32,634 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:32,634 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:32,635 INFO L748 eck$LassoCheckResult]: Stem: 557377#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 557378#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 558549#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 558058#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 558059#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 557532#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 557533#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 559224#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 559413#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 557399#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 557400#L1463 assume 0 == initPersonOnFloor_~floor#1; 559574#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 557333#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 558212#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 557091#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 557092#L1255 assume !(0 == callOnFloor_~floorID#1); 558862#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 557642#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 559703#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 559702#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 559696#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 559693#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 559691#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 559663#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 559659#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 559657#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 559653#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 559652#L1255-2 assume !(0 == callOnFloor_~floorID#1); 559651#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 559647#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 559646#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 559645#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 559644#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 559643#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 559642#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 557784#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 557785#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 558672#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 559464#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 559704#L2908 assume !(0 != timeShift_~tmp___9~2#1); 559517#L2999 assume !(1 == ~doorState~0); 558575#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 558157#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 558159#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 559002#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 559246#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 559789#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 559788#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 559787#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 559780#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 559781#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 559713#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 559714#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 557486#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 557487#isTopFloor_returnLabel#5 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 559559#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 559560#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 559447#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 557269#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 573092#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 573091#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 573085#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 573081#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 573066#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 573057#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 570227#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 570225#L707-2 [2023-11-21 22:25:32,635 INFO L750 eck$LassoCheckResult]: Loop: 570225#L707-2 assume !false; 570224#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 570223#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 570222#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 570221#L715 assume 1 != cleanup_~tmp___0~2#1; 570220#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 570219#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 570218#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 570216#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 570214#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 570213#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 570208#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 570203#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 570194#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 570189#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 570188#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 570183#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 570181#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 568570#L1192-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 568571#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 593410#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 593406#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 593404#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 593398#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 593396#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 593393#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 593390#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 593386#L2999-3 assume !(1 == ~doorState~0); 593383#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 593380#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 593377#L2520-2 assume !(0 == ~currentFloorID~0); 593374#L2526-2 assume ~currentFloorID~0 > 0; 593371#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 593368#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 593365#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 593362#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 593360#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 593356#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 593357#L2727-3 assume !(1 == ~currentHeading~0); 594158#L2737-9 assume !(0 == ~currentFloorID~0); 573056#L2737-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 573051#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 573050#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 573049#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 570286#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 570287#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 570288#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 570237#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 570230#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 570228#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 570225#L707-2 [2023-11-21 22:25:32,636 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:32,636 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 1 times [2023-11-21 22:25:32,637 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:32,637 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1100466587] [2023-11-21 22:25:32,637 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:32,637 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:32,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:33,055 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:33,056 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:33,056 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1100466587] [2023-11-21 22:25:33,056 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1100466587] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:33,056 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:33,056 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:33,057 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343586914] [2023-11-21 22:25:33,057 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:33,057 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:33,057 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:33,057 INFO L85 PathProgramCache]: Analyzing trace with hash -1936563240, now seen corresponding path program 1 times [2023-11-21 22:25:33,058 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:33,058 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [696565883] [2023-11-21 22:25:33,058 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:33,058 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:33,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:33,177 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:33,177 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:33,177 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [696565883] [2023-11-21 22:25:33,178 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [696565883] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:33,178 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:33,178 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2023-11-21 22:25:33,178 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [113178654] [2023-11-21 22:25:33,178 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:33,179 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:33,179 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:33,179 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2023-11-21 22:25:33,180 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2023-11-21 22:25:33,180 INFO L87 Difference]: Start difference. First operand 44362 states and 79715 transitions. cyclomatic complexity: 35354 Second operand has 7 states, 7 states have (on average 7.142857142857143) internal successors, (50), 7 states have internal predecessors, (50), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:34,953 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2023-11-21 22:25:34,953 INFO L93 Difference]: Finished difference Result 131336 states and 235136 transitions. [2023-11-21 22:25:34,953 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 131336 states and 235136 transitions. [2023-11-21 22:25:36,015 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 123389 [2023-11-21 22:25:36,483 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 131336 states to 131336 states and 235136 transitions. [2023-11-21 22:25:36,484 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 131336 [2023-11-21 22:25:36,572 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 131336 [2023-11-21 22:25:36,572 INFO L73 IsDeterministic]: Start isDeterministic. Operand 131336 states and 235136 transitions. [2023-11-21 22:25:36,630 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2023-11-21 22:25:36,630 INFO L218 hiAutomatonCegarLoop]: Abstraction has 131336 states and 235136 transitions. [2023-11-21 22:25:36,695 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 131336 states and 235136 transitions. [2023-11-21 22:25:37,824 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 131336 to 88537. [2023-11-21 22:25:37,881 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 88537 states, 88537 states have (on average 1.7966499881405513) internal successors, (159070), 88536 states have internal predecessors, (159070), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2023-11-21 22:25:38,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88537 states to 88537 states and 159070 transitions. [2023-11-21 22:25:38,079 INFO L240 hiAutomatonCegarLoop]: Abstraction has 88537 states and 159070 transitions. [2023-11-21 22:25:38,079 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2023-11-21 22:25:38,080 INFO L428 stractBuchiCegarLoop]: Abstraction has 88537 states and 159070 transitions. [2023-11-21 22:25:38,080 INFO L335 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2023-11-21 22:25:38,080 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 88537 states and 159070 transitions. [2023-11-21 22:25:38,905 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 81260 [2023-11-21 22:25:38,905 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2023-11-21 22:25:38,905 INFO L119 BuchiIsEmpty]: Starting construction of run [2023-11-21 22:25:38,908 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:38,908 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2023-11-21 22:25:38,909 INFO L748 eck$LassoCheckResult]: Stem: 733099#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 733100#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret47#1, main_~retValue_acc~6#1, main_~tmp~13#1;havoc main_~retValue_acc~6#1;havoc main_~tmp~13#1;assume { :begin_inline_select_helpers } true; 734266#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 733780#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 733781#valid_product_returnLabel#1 main_#t~ret47#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~13#1 := main_#t~ret47#1;havoc main_#t~ret47#1; 733256#L903 assume 0 != main_~tmp~13#1;assume { :begin_inline_setup } true; 733257#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification1_spec__1 } true;~landingButtons_spc1_0~0 := 0;~landingButtons_spc1_1~0 := 0;~landingButtons_spc1_2~0 := 0;~landingButtons_spc1_3~0 := 0;~landingButtons_spc1_4~0 := 0; 734914#__utac_acc__Specification1_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification1_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;havoc bigMacCall_~tmp~10#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 735096#L1829 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 733121#getOrigin_returnLabel#1 bigMacCall_#t~ret40#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~10#1 := bigMacCall_#t~ret40#1;havoc bigMacCall_#t~ret40#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~10#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 733122#L1463 assume 0 == initPersonOnFloor_~floor#1; 735237#L1464 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 733055#L1571-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 733930#L940 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 732813#L952-2 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 732814#L1255 assume !(0 == callOnFloor_~floorID#1); 734566#L1258 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 735027#L1267-2 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 734364#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 733561#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret40#1, bigMacCall_~tmp~10#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_angelinaCall } true;havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;havoc angelinaCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 2;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~11#1; 733473#L1829-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~11#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~11#1; 733474#getOrigin_returnLabel#2 angelinaCall_#t~ret37#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~11#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;angelinaCall_~tmp~7#1 := angelinaCall_#t~ret37#1;havoc angelinaCall_#t~ret37#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 2, angelinaCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 733503#L1463-1 assume 0 == initPersonOnFloor_~floor#1; 733510#L1464-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 732867#L1571-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;havoc callOnFloor_~__utac__ad__arg1~0#1;callOnFloor_~__utac__ad__arg1~0#1 := callOnFloor_~floorID#1;assume { :begin_inline___utac_acc__Specification1_spec__2 } true;__utac_acc__Specification1_spec__2_#in~floor#1 := callOnFloor_~__utac__ad__arg1~0#1;havoc __utac_acc__Specification1_spec__2_~floor#1;__utac_acc__Specification1_spec__2_~floor#1 := __utac_acc__Specification1_spec__2_#in~floor#1; 732868#L940-2 assume 0 == __utac_acc__Specification1_spec__2_~floor#1;~landingButtons_spc1_0~0 := 1; 735320#L952-5 havoc __utac_acc__Specification1_spec__2_~floor#1;havoc __utac_acc__Specification1_spec__2_#in~floor#1;assume { :end_inline___utac_acc__Specification1_spec__2 } true; 735321#L1255-2 assume !(0 == callOnFloor_~floorID#1); 735316#L1258-2 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 735310#L1267-5 havoc callOnFloor_~floorID#1, callOnFloor_~__utac__ad__arg1~0#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 735311#initPersonOnFloor_returnLabel#2 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 735304#angelinaCall_returnLabel#1 havoc angelinaCall_#t~ret37#1, angelinaCall_~tmp~7#1;assume { :end_inline_angelinaCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret41#1, cleanup_#t~ret42#1, cleanup_~i~2#1, cleanup_~tmp~11#1, cleanup_~tmp___0~2#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~11#1;havoc cleanup_~tmp___0~2#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 735305#L1188 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 735297#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 735298#L2760 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 733508#L2164 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 733509#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 735136#L2767 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 735138#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 735301#L2908 assume !(0 != timeShift_~tmp___9~2#1); 735303#L2999 assume !(1 == ~doorState~0); 740301#L2999-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 773264#L2351 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 773263#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret63#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret63#1;havoc stopRequestedInDirection_#t~ret63#1; 773262#L2355 assume 0 != stopRequestedInDirection_~tmp~20#1;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 773228#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 773317#L3007 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~24#1; 773211#L2782 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~24#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~24#1; 773314#getReverseHeading_returnLabel#1 timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~24#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 773312#L2351-1 assume !(1 == stopRequestedInDirection_~dir#1); 773310#L2520-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 773290#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret98#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret98#1;havoc timeShift_#t~ret98#1; 773287#L3016 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 773286#L2727-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~9#1;isTopFloor_~retValue_acc~9#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~9#1; 773284#isTopFloor_returnLabel#5 continueInDirection_#t~ret74#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~9#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret74#1;havoc continueInDirection_#t~ret74#1; 773282#L2731-6 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 773283#L2737-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 796386#L2743-5 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 796385#L3016-2 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 796315#getCurrentFloorID_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 796313#L978 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 796314#L979 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 734039#areDoorsOpen_returnLabel#1 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 734040#L983 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 796285#L1038 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 796283#timeShift_returnLabel#1 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 796282#L707-2 [2023-11-21 22:25:38,909 INFO L750 eck$LassoCheckResult]: Loop: 796282#L707-2 assume !false; 796281#L708 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 796280#L711 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;havoc isBlocked_~retValue_acc~13#1;isBlocked_~retValue_acc~13#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~13#1; 796279#isBlocked_returnLabel#1 cleanup_#t~ret41#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~13#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~2#1 := cleanup_#t~ret41#1;havoc cleanup_#t~ret41#1; 796264#L715 assume 1 != cleanup_~tmp___0~2#1; 796260#L715-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;havoc isIdle_~retValue_acc~20#1;havoc isIdle_~tmp~19#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~19#1;havoc anyStopRequested_~tmp~18#1;havoc anyStopRequested_~tmp___0~5#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 796220#L1188-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 796221#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret57#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret57#1;havoc anyStopRequested_#t~ret57#1; 796215#L2255 assume !(0 != anyStopRequested_~tmp___3~1#1); 796216#L2259 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 734924#L1188-22 assume !(0 == isFloorCalling_~floorID#1); 734925#L1192-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 796257#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret58#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~2#1 := anyStopRequested_#t~ret58#1;havoc anyStopRequested_#t~ret58#1; 796245#L2266 assume 0 != anyStopRequested_~tmp___2~2#1;anyStopRequested_~retValue_acc~19#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~19#1; 773706#anyStopRequested_returnLabel#1 isIdle_#t~ret62#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret57#1, anyStopRequested_#t~ret58#1, anyStopRequested_#t~ret59#1, anyStopRequested_#t~ret60#1, anyStopRequested_#t~ret61#1, anyStopRequested_~retValue_acc~19#1, anyStopRequested_~tmp~18#1, anyStopRequested_~tmp___0~5#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~19#1 := isIdle_#t~ret62#1;havoc isIdle_#t~ret62#1;isIdle_~retValue_acc~20#1 := (if 0 == isIdle_~tmp~19#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~20#1; 773649#isIdle_returnLabel#1 cleanup_#t~ret42#1 := isIdle_#res#1;havoc isIdle_#t~ret62#1, isIdle_~retValue_acc~20#1, isIdle_~tmp~19#1;assume { :end_inline_isIdle } true;cleanup_~tmp~11#1 := cleanup_#t~ret42#1;havoc cleanup_#t~ret42#1; 773554#L727 assume !(0 != cleanup_~tmp~11#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~24#1;havoc timeShift_~tmp___0~9#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~23#1;havoc stopRequestedAtCurrentFloor_~tmp~22#1;havoc stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 773551#L1188-26 assume !(0 == isFloorCalling_~floorID#1); 736323#L1192-26 assume !(1 == isFloorCalling_~floorID#1); 736317#L1196-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 736315#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret75#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~7#1 := stopRequestedAtCurrentFloor_#t~ret75#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1; 736313#L2760-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~7#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~16#1; 736311#L2164-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 736306#L2168-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~16#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~16#1; 736301#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret76#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~16#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~22#1 := stopRequestedAtCurrentFloor_#t~ret76#1;havoc stopRequestedAtCurrentFloor_#t~ret76#1; 736298#L2767-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~22#1);stopRequestedAtCurrentFloor_~retValue_acc~23#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~23#1; 736296#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret89#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret75#1, stopRequestedAtCurrentFloor_#t~ret76#1, stopRequestedAtCurrentFloor_~retValue_acc~23#1, stopRequestedAtCurrentFloor_~tmp~22#1, stopRequestedAtCurrentFloor_~tmp___0~7#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret89#1;havoc timeShift_#t~ret89#1; 736293#L2908-2 assume !(0 != timeShift_~tmp___9~2#1); 736290#L2999-3 assume !(1 == ~doorState~0); 736291#L2999-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~21#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~tmp___1~5#1;havoc stopRequestedInDirection_~tmp___2~3#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 796467#L2351-2 assume !(1 == stopRequestedInDirection_~dir#1); 796466#L2520-2 assume !(0 == ~currentFloorID~0); 796464#L2526-2 assume ~currentFloorID~0 > 0; 796465#L2527-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~7#1; 796603#L1188-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~7#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~7#1; 796602#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret69#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~7#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret69#1;havoc stopRequestedInDirection_#t~ret69#1; 796600#L2531-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~21#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~21#1; 796576#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret63#1, stopRequestedInDirection_#t~ret64#1, stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_#t~ret68#1, stopRequestedInDirection_#t~ret69#1, stopRequestedInDirection_#t~ret70#1, stopRequestedInDirection_#t~ret71#1, stopRequestedInDirection_#t~ret72#1, stopRequestedInDirection_#t~ret73#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~21#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~tmp___1~5#1, stopRequestedInDirection_~tmp___2~3#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1; 796344#L3007-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 796342#L2727-3 assume !(1 == ~currentHeading~0); 796339#L2737-9 assume !(0 == ~currentFloorID~0); 742507#L2737-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 796334#L2743-7 havoc continueInDirection_#t~ret74#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 796332#L3016-5 assume { :begin_inline___utac_acc__Specification1_spec__3 } true;havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification1_spec__3_~floor~0#1;havoc __utac_acc__Specification1_spec__3_~tmp~14#1;havoc __utac_acc__Specification1_spec__3_~tmp___0~4#1;havoc __utac_acc__Specification1_spec__3_~tmp___1~3#1;havoc __utac_acc__Specification1_spec__3_~tmp___2~1#1;havoc __utac_acc__Specification1_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;havoc getCurrentFloorID_~retValue_acc~14#1;getCurrentFloorID_~retValue_acc~14#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~14#1; 796330#getCurrentFloorID_returnLabel#2 __utac_acc__Specification1_spec__3_#t~ret48#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~14#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification1_spec__3_~tmp~14#1 := __utac_acc__Specification1_spec__3_#t~ret48#1;havoc __utac_acc__Specification1_spec__3_#t~ret48#1;__utac_acc__Specification1_spec__3_~floor~0#1 := __utac_acc__Specification1_spec__3_~tmp~14#1; 796329#L978-1 assume 0 == __utac_acc__Specification1_spec__3_~floor~0#1; 796322#L979-1 assume 0 != ~landingButtons_spc1_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;havoc areDoorsOpen_~retValue_acc~15#1;areDoorsOpen_~retValue_acc~15#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~15#1; 796320#areDoorsOpen_returnLabel#6 __utac_acc__Specification1_spec__3_#t~ret49#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~15#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification1_spec__3_~tmp___4~0#1 := __utac_acc__Specification1_spec__3_#t~ret49#1;havoc __utac_acc__Specification1_spec__3_#t~ret49#1; 796303#L983-2 assume 0 != __utac_acc__Specification1_spec__3_~tmp___4~0#1;~landingButtons_spc1_0~0 := 0; 796286#L1038-1 havoc __utac_acc__Specification1_spec__3_#t~ret48#1, __utac_acc__Specification1_spec__3_#t~ret49#1, __utac_acc__Specification1_spec__3_#t~ret50#1, __utac_acc__Specification1_spec__3_#t~ret51#1, __utac_acc__Specification1_spec__3_#t~ret52#1, __utac_acc__Specification1_spec__3_#t~ret53#1, __utac_acc__Specification1_spec__3_~floor~0#1, __utac_acc__Specification1_spec__3_~tmp~14#1, __utac_acc__Specification1_spec__3_~tmp___0~4#1, __utac_acc__Specification1_spec__3_~tmp___1~3#1, __utac_acc__Specification1_spec__3_~tmp___2~1#1, __utac_acc__Specification1_spec__3_~tmp___3~0#1, __utac_acc__Specification1_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification1_spec__3 } true; 796284#timeShift_returnLabel#2 havoc timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_#t~ret98#1, timeShift_#t~ret99#1, timeShift_~tmp~24#1, timeShift_~tmp___0~9#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 796282#L707-2 [2023-11-21 22:25:38,911 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:38,911 INFO L85 PathProgramCache]: Analyzing trace with hash 1656121101, now seen corresponding path program 2 times [2023-11-21 22:25:38,911 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:38,911 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636513721] [2023-11-21 22:25:38,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:38,912 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:38,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:38,986 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:38,986 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:38,986 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636513721] [2023-11-21 22:25:38,987 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [636513721] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:38,987 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:38,987 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2023-11-21 22:25:38,987 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [684357002] [2023-11-21 22:25:38,987 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:38,988 INFO L753 eck$LassoCheckResult]: stem already infeasible [2023-11-21 22:25:38,988 INFO L160 PredicateUnifier]: Initialized classic predicate unifier [2023-11-21 22:25:38,988 INFO L85 PathProgramCache]: Analyzing trace with hash -302610988, now seen corresponding path program 1 times [2023-11-21 22:25:38,988 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2023-11-21 22:25:38,988 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [696356061] [2023-11-21 22:25:38,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2023-11-21 22:25:38,989 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2023-11-21 22:25:38,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2023-11-21 22:25:39,039 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2023-11-21 22:25:39,040 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2023-11-21 22:25:39,040 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [696356061] [2023-11-21 22:25:39,040 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [696356061] provided 1 perfect and 0 imperfect interpolant sequences [2023-11-21 22:25:39,040 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2023-11-21 22:25:39,040 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2023-11-21 22:25:39,041 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1487348668] [2023-11-21 22:25:39,041 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2023-11-21 22:25:39,041 INFO L765 eck$LassoCheckResult]: loop already infeasible [2023-11-21 22:25:39,041 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2023-11-21 22:25:39,042 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2023-11-21 22:25:39,042 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2023-11-21 22:25:39,042 INFO L87 Difference]: Start difference. First operand 88537 states and 159070 transitions. cyclomatic complexity: 70534 Second operand has 5 states, 5 states have (on average 10.2) internal successors, (51), 5 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)