./Ultimate.py --spec /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/properties/termination.prp --file /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 61a67961 Calling Ultimate with: /root/.sdkman/candidates/java/current/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product25.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 68493680033c9035e39b01d00eb3730662e9195bee3c7e3d4b2805e2b52b60ec --- Real Ultimate output --- This is Ultimate 0.2.5-wip.fs.cvc5-61a6796-m [2024-10-15 00:46:33,251 INFO L188 SettingsManager]: Resetting all preferences to default values... [2024-10-15 00:46:33,326 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2024-10-15 00:46:33,333 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2024-10-15 00:46:33,334 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2024-10-15 00:46:33,358 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2024-10-15 00:46:33,359 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2024-10-15 00:46:33,359 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2024-10-15 00:46:33,359 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2024-10-15 00:46:33,360 INFO L153 SettingsManager]: * Use memory slicer=true [2024-10-15 00:46:33,360 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2024-10-15 00:46:33,360 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2024-10-15 00:46:33,361 INFO L153 SettingsManager]: * Use SBE=true [2024-10-15 00:46:33,361 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2024-10-15 00:46:33,361 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2024-10-15 00:46:33,362 INFO L153 SettingsManager]: * Use old map elimination=false [2024-10-15 00:46:33,362 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2024-10-15 00:46:33,362 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2024-10-15 00:46:33,362 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2024-10-15 00:46:33,363 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2024-10-15 00:46:33,363 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2024-10-15 00:46:33,366 INFO L153 SettingsManager]: * sizeof long=4 [2024-10-15 00:46:33,366 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2024-10-15 00:46:33,366 INFO L153 SettingsManager]: * sizeof POINTER=4 [2024-10-15 00:46:33,368 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2024-10-15 00:46:33,368 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2024-10-15 00:46:33,368 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2024-10-15 00:46:33,369 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2024-10-15 00:46:33,369 INFO L153 SettingsManager]: * Allow undefined functions=false [2024-10-15 00:46:33,369 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2024-10-15 00:46:33,369 INFO L153 SettingsManager]: * sizeof long double=12 [2024-10-15 00:46:33,369 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2024-10-15 00:46:33,370 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2024-10-15 00:46:33,370 INFO L153 SettingsManager]: * Use constant arrays=true [2024-10-15 00:46:33,370 INFO L151 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2024-10-15 00:46:33,370 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2024-10-15 00:46:33,371 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2024-10-15 00:46:33,371 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2024-10-15 00:46:33,375 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2024-10-15 00:46:33,375 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 68493680033c9035e39b01d00eb3730662e9195bee3c7e3d4b2805e2b52b60ec [2024-10-15 00:46:33,615 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2024-10-15 00:46:33,639 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2024-10-15 00:46:33,642 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2024-10-15 00:46:33,644 INFO L270 PluginConnector]: Initializing CDTParser... [2024-10-15 00:46:33,644 INFO L274 PluginConnector]: CDTParser initialized [2024-10-15 00:46:33,645 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product25.cil.c [2024-10-15 00:46:34,967 INFO L533 CDTParser]: Created temporary CDT project at NULL [2024-10-15 00:46:35,245 INFO L384 CDTParser]: Found 1 translation units. [2024-10-15 00:46:35,245 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec2_product25.cil.c [2024-10-15 00:46:35,270 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/edf817f34/7f4e219264e3445f808b264f7a8756be/FLAG544638aa9 [2024-10-15 00:46:35,546 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/edf817f34/7f4e219264e3445f808b264f7a8756be [2024-10-15 00:46:35,548 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2024-10-15 00:46:35,549 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2024-10-15 00:46:35,550 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2024-10-15 00:46:35,550 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2024-10-15 00:46:35,555 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2024-10-15 00:46:35,555 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 12:46:35" (1/1) ... [2024-10-15 00:46:35,556 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@30657948 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:35, skipping insertion in model container [2024-10-15 00:46:35,556 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.10 12:46:35" (1/1) ... [2024-10-15 00:46:35,613 INFO L175 MainTranslator]: Built tables and reachable declarations [2024-10-15 00:46:36,077 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-15 00:46:36,101 INFO L200 MainTranslator]: Completed pre-run [2024-10-15 00:46:36,110 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [48] [2024-10-15 00:46:36,111 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [86] [2024-10-15 00:46:36,112 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification2_spec.i","") [100] [2024-10-15 00:46:36,112 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [286] [2024-10-15 00:46:36,113 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [1765] [2024-10-15 00:46:36,113 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [1884] [2024-10-15 00:46:36,113 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [2546] [2024-10-15 00:46:36,113 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [2638] [2024-10-15 00:46:36,113 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [3004] [2024-10-15 00:46:36,114 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [3013] [2024-10-15 00:46:36,201 INFO L210 PostProcessor]: Analyzing one entry point: main [2024-10-15 00:46:36,235 INFO L204 MainTranslator]: Completed translation [2024-10-15 00:46:36,236 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36 WrapperNode [2024-10-15 00:46:36,236 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2024-10-15 00:46:36,238 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2024-10-15 00:46:36,238 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2024-10-15 00:46:36,238 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2024-10-15 00:46:36,244 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,264 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,444 INFO L138 Inliner]: procedures = 91, calls = 335, calls flagged for inlining = 188, calls inlined = 305, statements flattened = 9017 [2024-10-15 00:46:36,445 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2024-10-15 00:46:36,445 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2024-10-15 00:46:36,445 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2024-10-15 00:46:36,445 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2024-10-15 00:46:36,454 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,455 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,476 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,540 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4, 4, 4, 4, 2]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2024-10-15 00:46:36,541 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,541 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,581 INFO L184 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,628 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,644 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,663 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,688 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2024-10-15 00:46:36,690 INFO L112 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2024-10-15 00:46:36,690 INFO L270 PluginConnector]: Initializing RCFGBuilder... [2024-10-15 00:46:36,690 INFO L274 PluginConnector]: RCFGBuilder initialized [2024-10-15 00:46:36,691 INFO L184 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (1/1) ... [2024-10-15 00:46:36,698 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2024-10-15 00:46:36,708 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2024-10-15 00:46:36,724 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2024-10-15 00:46:36,726 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2024-10-15 00:46:36,766 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2024-10-15 00:46:36,767 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2024-10-15 00:46:36,767 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2024-10-15 00:46:36,768 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2024-10-15 00:46:36,768 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2024-10-15 00:46:36,768 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2024-10-15 00:46:36,768 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2024-10-15 00:46:36,769 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2024-10-15 00:46:36,770 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2024-10-15 00:46:36,933 INFO L238 CfgBuilder]: Building ICFG [2024-10-15 00:46:36,936 INFO L264 CfgBuilder]: Building CFG for each procedure with an implementation [2024-10-15 00:46:40,694 INFO L? ?]: Removed 4103 outVars from TransFormulas that were not future-live. [2024-10-15 00:46:40,695 INFO L287 CfgBuilder]: Performing block encoding [2024-10-15 00:46:40,741 INFO L309 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2024-10-15 00:46:40,742 INFO L314 CfgBuilder]: Removed 1 assume(true) statements. [2024-10-15 00:46:40,742 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 12:46:40 BoogieIcfgContainer [2024-10-15 00:46:40,743 INFO L131 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2024-10-15 00:46:40,743 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2024-10-15 00:46:40,744 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2024-10-15 00:46:40,747 INFO L274 PluginConnector]: BuchiAutomizer initialized [2024-10-15 00:46:40,747 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-15 00:46:40,748 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.10 12:46:35" (1/3) ... [2024-10-15 00:46:40,749 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@290495ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.10 12:46:40, skipping insertion in model container [2024-10-15 00:46:40,749 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-15 00:46:40,749 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.10 12:46:36" (2/3) ... [2024-10-15 00:46:40,749 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@290495ea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.10 12:46:40, skipping insertion in model container [2024-10-15 00:46:40,749 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2024-10-15 00:46:40,749 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.10 12:46:40" (3/3) ... [2024-10-15 00:46:40,751 INFO L332 chiAutomizerObserver]: Analyzing ICFG elevator_spec2_product25.cil.c [2024-10-15 00:46:40,840 INFO L300 stractBuchiCegarLoop]: Interprodecural is true [2024-10-15 00:46:40,840 INFO L301 stractBuchiCegarLoop]: Hoare is None [2024-10-15 00:46:40,840 INFO L302 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2024-10-15 00:46:40,840 INFO L303 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2024-10-15 00:46:40,841 INFO L304 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2024-10-15 00:46:40,841 INFO L305 stractBuchiCegarLoop]: Difference is false [2024-10-15 00:46:40,841 INFO L306 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2024-10-15 00:46:40,841 INFO L310 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2024-10-15 00:46:40,854 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2584 states, 2583 states have (on average 1.8617886178861789) internal successors, (4809), 2583 states have internal predecessors, (4809), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:40,942 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1273 [2024-10-15 00:46:40,943 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:40,943 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:40,955 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:40,956 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:40,956 INFO L332 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2024-10-15 00:46:40,961 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 2584 states, 2583 states have (on average 1.8617886178861789) internal successors, (4809), 2583 states have internal predecessors, (4809), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:40,988 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1273 [2024-10-15 00:46:40,989 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:40,989 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:40,992 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:40,993 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:41,002 INFO L745 eck$LassoCheckResult]: Stem: 193#$Ultimate##0true assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 2480#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1019#select_helpers_returnLabel#1true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 621#select_features_returnLabel#1true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 778#valid_product_returnLabel#1true main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 54#L3350true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1715#setup_returnLabel#1true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 120#__utac_acc__Specification2_spec__1_returnLabel#1true assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 1962#L1810true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 201#getOrigin_returnLabel#1true bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1301#L2239true assume 0 == initPersonOnFloor_~floor#1; 493#L2240true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 483#L2347-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 735#L2031true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1916#L2043-2true havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1119#initPersonOnFloor_returnLabel#1true havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 469#bigMacCall_returnLabel#1true havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 81#L1968true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 95#isFloorCalling_returnLabel#1true stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 217#L1161true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 290#stopRequestedAtCurrentFloor_returnLabel#1true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 622#L1309true assume !(0 != timeShift_~tmp___9~2#1); 225#L1400true assume !(1 == ~doorState~0); 832#L1400-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1081#L752true assume !(1 == stopRequestedInDirection_~dir#1); 802#L921true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1823#stopRequestedInDirection_returnLabel#1true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1000#L1408true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 726#L1128true assume !(1 == ~currentHeading~0); 160#L1138true assume !(0 == ~currentFloorID~0); 1397#L1138-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1661#L1144-1true havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1482#L1417-2true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1210#getCurrentFloorID_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 845#L165true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 438#L166true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 813#areDoorsOpen_returnLabel#1true __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 235#L170true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1225#L225true havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2175#timeShift_returnLabel#1true havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 859#L3157-2true [2024-10-15 00:46:41,003 INFO L747 eck$LassoCheckResult]: Loop: 859#L3157-2true assume !false; 1411#L3158true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1199#L3161true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 1004#isBlocked_returnLabel#1true cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1914#L3165true assume 1 != cleanup_~tmp___0~9#1; 1005#L3165-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 804#L1968-21true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1625#isFloorCalling_returnLabel#22true anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 1751#L656true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 159#anyStopRequested_returnLabel#1true isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 1260#isIdle_returnLabel#1true cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 1997#L3177true assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1134#L1968-26true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1270#isFloorCalling_returnLabel#27true stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 88#L1161-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2247#stopRequestedAtCurrentFloor_returnLabel#2true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1731#L1309-2true assume !(0 != timeShift_~tmp___9~2#1); 734#L1400-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1649#L1400-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 2020#L752-2true assume !(1 == stopRequestedInDirection_~dir#1); 1542#L921-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1311#stopRequestedInDirection_returnLabel#3true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 2386#L1408-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 2352#L1128-3true assume !(1 == ~currentHeading~0); 1261#L1138-9true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2021#L1138-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 179#L1144-7true havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1192#L1417-5true assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1530#getCurrentFloorID_returnLabel#2true __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 341#L165-1true assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 2200#L166-1true assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 1589#areDoorsOpen_returnLabel#6true __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 2497#L170-2true assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1889#L225-1true havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 2206#timeShift_returnLabel#2true havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 859#L3157-2true [2024-10-15 00:46:41,008 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:41,009 INFO L85 PathProgramCache]: Analyzing trace with hash -1505249457, now seen corresponding path program 1 times [2024-10-15 00:46:41,016 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:41,017 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [725090508] [2024-10-15 00:46:41,017 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:41,018 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:41,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:41,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:41,367 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:41,368 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [725090508] [2024-10-15 00:46:41,369 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [725090508] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:41,369 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:41,369 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:41,370 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1641676659] [2024-10-15 00:46:41,371 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:41,377 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:41,378 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:41,378 INFO L85 PathProgramCache]: Analyzing trace with hash 1406660823, now seen corresponding path program 1 times [2024-10-15 00:46:41,378 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:41,378 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901568027] [2024-10-15 00:46:41,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:41,379 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:41,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:41,519 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:41,520 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:41,520 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901568027] [2024-10-15 00:46:41,521 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901568027] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:41,521 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:41,521 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-10-15 00:46:41,521 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1619046293] [2024-10-15 00:46:41,521 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:41,522 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:41,523 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:41,556 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-10-15 00:46:41,557 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-15 00:46:41,564 INFO L87 Difference]: Start difference. First operand has 2584 states, 2583 states have (on average 1.8617886178861789) internal successors, (4809), 2583 states have internal predecessors, (4809), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 6 states, 6 states have (on average 5.833333333333333) internal successors, (35), 6 states have internal predecessors, (35), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:41,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:41,770 INFO L93 Difference]: Finished difference Result 2578 states and 4795 transitions. [2024-10-15 00:46:41,771 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 2578 states and 4795 transitions. [2024-10-15 00:46:41,792 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1275 [2024-10-15 00:46:41,818 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 2578 states to 2560 states and 4775 transitions. [2024-10-15 00:46:41,819 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 2560 [2024-10-15 00:46:41,826 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 2560 [2024-10-15 00:46:41,827 INFO L73 IsDeterministic]: Start isDeterministic. Operand 2560 states and 4775 transitions. [2024-10-15 00:46:41,840 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:41,840 INFO L218 hiAutomatonCegarLoop]: Abstraction has 2560 states and 4775 transitions. [2024-10-15 00:46:41,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 2560 states and 4775 transitions. [2024-10-15 00:46:41,939 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 2560 to 2560. [2024-10-15 00:46:41,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 2560 states, 2560 states have (on average 1.865234375) internal successors, (4775), 2559 states have internal predecessors, (4775), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:41,957 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 2560 states to 2560 states and 4775 transitions. [2024-10-15 00:46:41,959 INFO L240 hiAutomatonCegarLoop]: Abstraction has 2560 states and 4775 transitions. [2024-10-15 00:46:41,960 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-10-15 00:46:41,965 INFO L425 stractBuchiCegarLoop]: Abstraction has 2560 states and 4775 transitions. [2024-10-15 00:46:41,966 INFO L332 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2024-10-15 00:46:41,966 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 2560 states and 4775 transitions. [2024-10-15 00:46:41,984 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1275 [2024-10-15 00:46:41,984 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:41,984 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:41,989 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:41,989 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:41,990 INFO L745 eck$LassoCheckResult]: Stem: 5626#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 5627#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 6884#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 6366#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 6367#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 5308#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 5309#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 5460#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 5461#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 5646#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5647#L2239 assume 0 == initPersonOnFloor_~floor#1; 6162#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5311#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 6145#L2031 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 6053#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 6992#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 6118#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 5369#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 5370#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 5405#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 5680#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 6847#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 7018#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 7722#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 7734#L1309 assume !(0 != timeShift_~tmp___9~2#1); 5695#L1400 assume !(1 == ~doorState~0); 5696#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 6648#L752 assume !(1 == stopRequestedInDirection_~dir#1); 6609#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 5559#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 6861#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 6515#L1128 assume !(1 == ~currentHeading~0); 5553#L1138 assume !(0 == ~currentFloorID~0); 5554#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 7250#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5289#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 7079#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 6672#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 6071#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 6072#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 5706#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 5707#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7090#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 6688#L3157-2 [2024-10-15 00:46:41,990 INFO L747 eck$LassoCheckResult]: Loop: 6688#L3157-2 assume !false; 6689#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 7070#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 6867#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 6868#L3165 assume 1 != cleanup_~tmp___0~9#1; 6869#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 6615#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 6387#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 7423#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 5551#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 5552#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 7121#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 7010#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 5517#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 5387#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 5201#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 5202#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 5965#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 5966#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 7733#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 6524#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 6525#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 7439#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 7365#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 5615#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 7171#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 7714#L1128-3 assume !(1 == ~currentHeading~0); 7122#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 7123#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5596#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 5597#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 7058#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 5907#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 5908#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 7403#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 7404#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 6829#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 7563#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 6688#L3157-2 [2024-10-15 00:46:41,991 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:41,991 INFO L85 PathProgramCache]: Analyzing trace with hash 1155006256, now seen corresponding path program 1 times [2024-10-15 00:46:41,992 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:41,992 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1363985245] [2024-10-15 00:46:41,992 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:41,992 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:42,019 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:42,097 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:42,098 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:42,098 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1363985245] [2024-10-15 00:46:42,098 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1363985245] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:42,098 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:42,098 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:42,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1600205966] [2024-10-15 00:46:42,099 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:42,099 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:42,099 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:42,099 INFO L85 PathProgramCache]: Analyzing trace with hash 835343776, now seen corresponding path program 1 times [2024-10-15 00:46:42,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:42,099 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1566209932] [2024-10-15 00:46:42,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:42,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:42,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:42,199 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:42,199 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:42,199 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1566209932] [2024-10-15 00:46:42,200 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1566209932] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:42,200 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:42,200 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:42,200 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1999344820] [2024-10-15 00:46:42,200 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:42,200 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:42,200 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:42,201 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-15 00:46:42,201 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-15 00:46:42,201 INFO L87 Difference]: Start difference. First operand 2560 states and 4775 transitions. cyclomatic complexity: 2216 Second operand has 7 states, 7 states have (on average 5.428571428571429) internal successors, (38), 7 states have internal predecessors, (38), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:43,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:43,175 INFO L93 Difference]: Finished difference Result 5162 states and 9547 transitions. [2024-10-15 00:46:43,175 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 5162 states and 9547 transitions. [2024-10-15 00:46:43,204 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2605 [2024-10-15 00:46:43,228 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 5162 states to 5162 states and 9547 transitions. [2024-10-15 00:46:43,229 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 5162 [2024-10-15 00:46:43,234 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 5162 [2024-10-15 00:46:43,234 INFO L73 IsDeterministic]: Start isDeterministic. Operand 5162 states and 9547 transitions. [2024-10-15 00:46:43,242 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:43,242 INFO L218 hiAutomatonCegarLoop]: Abstraction has 5162 states and 9547 transitions. [2024-10-15 00:46:43,247 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5162 states and 9547 transitions. [2024-10-15 00:46:43,314 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5162 to 5072. [2024-10-15 00:46:43,323 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5072 states, 5072 states have (on average 1.8645504731861198) internal successors, (9457), 5071 states have internal predecessors, (9457), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:43,335 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5072 states to 5072 states and 9457 transitions. [2024-10-15 00:46:43,336 INFO L240 hiAutomatonCegarLoop]: Abstraction has 5072 states and 9457 transitions. [2024-10-15 00:46:43,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 00:46:43,337 INFO L425 stractBuchiCegarLoop]: Abstraction has 5072 states and 9457 transitions. [2024-10-15 00:46:43,337 INFO L332 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2024-10-15 00:46:43,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5072 states and 9457 transitions. [2024-10-15 00:46:43,357 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2556 [2024-10-15 00:46:43,358 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:43,358 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:43,360 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:43,361 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:43,361 INFO L745 eck$LassoCheckResult]: Stem: 13369#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 13370#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 14682#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 14125#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 14126#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 13047#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 13048#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 13200#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 13201#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 13387#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 13388#L2239 assume 0 == initPersonOnFloor_~floor#1; 13916#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 13050#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 13897#L2031 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 14299#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 15483#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 15757#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 15755#L1968 assume !(0 == isFloorCalling_~floorID#1); 15756#L1972 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 15754#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 15753#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 14877#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 14645#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 14833#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 13561#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 13562#L1309 assume !(0 != timeShift_~tmp___9~2#1); 15938#L1400 assume !(1 == ~doorState~0); 15937#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15936#L752 assume !(1 == stopRequestedInDirection_~dir#1); 15879#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 15877#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 15876#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 15875#L1128 assume !(1 == ~currentHeading~0); 15872#L1138 assume !(0 == ~currentFloorID~0); 15871#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15320#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 13026#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 14905#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 14455#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 13821#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 13822#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 13447#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 13448#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 15632#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 15633#L3157-2 [2024-10-15 00:46:43,362 INFO L747 eck$LassoCheckResult]: Loop: 15633#L3157-2 assume !false; 15104#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 15105#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 14662#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 14663#L3165 assume 1 != cleanup_~tmp___0~9#1; 14664#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 14665#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 15758#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 15380#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 15381#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 14953#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 14954#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 14823#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 14825#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 16056#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 16054#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 16049#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 14183#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 14184#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 15751#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 15752#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 14297#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 14298#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 15559#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 15560#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 16000#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 15999#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 15997#L1128-3 assume !(1 == ~currentHeading~0); 15996#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 15994#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 15806#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 15805#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 15804#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 15803#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 15802#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 15801#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 15734#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 14623#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 15649#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 15633#L3157-2 [2024-10-15 00:46:43,362 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:43,362 INFO L85 PathProgramCache]: Analyzing trace with hash -2091364375, now seen corresponding path program 1 times [2024-10-15 00:46:43,362 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:43,363 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [822063835] [2024-10-15 00:46:43,363 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:43,363 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:43,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:43,411 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:43,412 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:43,412 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [822063835] [2024-10-15 00:46:43,412 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [822063835] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:43,412 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:43,412 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:43,413 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1814602682] [2024-10-15 00:46:43,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:43,413 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:43,413 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:43,413 INFO L85 PathProgramCache]: Analyzing trace with hash 746308465, now seen corresponding path program 1 times [2024-10-15 00:46:43,414 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:43,414 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1857593297] [2024-10-15 00:46:43,414 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:43,414 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:43,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:43,480 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:43,481 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:43,481 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1857593297] [2024-10-15 00:46:43,481 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1857593297] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:43,482 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:43,482 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:43,483 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1277448698] [2024-10-15 00:46:43,483 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:43,483 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:43,484 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:43,484 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-15 00:46:43,484 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-15 00:46:43,484 INFO L87 Difference]: Start difference. First operand 5072 states and 9457 transitions. cyclomatic complexity: 4386 Second operand has 7 states, 7 states have (on average 5.571428571428571) internal successors, (39), 7 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:44,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:44,974 INFO L93 Difference]: Finished difference Result 9200 states and 17122 transitions. [2024-10-15 00:46:44,974 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 9200 states and 17122 transitions. [2024-10-15 00:46:45,018 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4672 [2024-10-15 00:46:45,061 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 9200 states to 9200 states and 17122 transitions. [2024-10-15 00:46:45,062 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 9200 [2024-10-15 00:46:45,072 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 9200 [2024-10-15 00:46:45,073 INFO L73 IsDeterministic]: Start isDeterministic. Operand 9200 states and 17122 transitions. [2024-10-15 00:46:45,084 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:45,084 INFO L218 hiAutomatonCegarLoop]: Abstraction has 9200 states and 17122 transitions. [2024-10-15 00:46:45,093 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 9200 states and 17122 transitions. [2024-10-15 00:46:45,253 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 9200 to 9182. [2024-10-15 00:46:45,269 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9182 states, 9182 states have (on average 1.8614680897407971) internal successors, (17092), 9181 states have internal predecessors, (17092), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:45,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9182 states to 9182 states and 17092 transitions. [2024-10-15 00:46:45,291 INFO L240 hiAutomatonCegarLoop]: Abstraction has 9182 states and 17092 transitions. [2024-10-15 00:46:45,293 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2024-10-15 00:46:45,294 INFO L425 stractBuchiCegarLoop]: Abstraction has 9182 states and 17092 transitions. [2024-10-15 00:46:45,294 INFO L332 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2024-10-15 00:46:45,294 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9182 states and 17092 transitions. [2024-10-15 00:46:45,327 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4663 [2024-10-15 00:46:45,328 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:45,328 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:45,330 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:45,330 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:45,331 INFO L745 eck$LassoCheckResult]: Stem: 27657#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 27658#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 28958#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 28413#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 28414#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 27335#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 27336#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 27490#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 27491#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 27674#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 27675#L2239 assume 0 == initPersonOnFloor_~floor#1; 28203#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 27340#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 28186#L2031 assume !(0 == callOnFloor_~floorID#1); 28093#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 28094#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 34090#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 34089#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 34088#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 34087#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 34086#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 34084#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 34080#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 34078#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 34077#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 34075#L1309 assume !(0 != timeShift_~tmp___9~2#1); 34074#L1400 assume !(1 == ~doorState~0); 34073#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 34071#L752 assume !(1 == stopRequestedInDirection_~dir#1); 34072#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 34069#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 34258#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 33980#L1128 assume !(1 == ~currentHeading~0); 33969#L1138 assume !(0 == ~currentFloorID~0); 30358#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 30357#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 30234#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 30233#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 30232#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 30230#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 30231#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 30185#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 30178#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 30125#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 30123#L3157-2 [2024-10-15 00:46:45,331 INFO L747 eck$LassoCheckResult]: Loop: 30123#L3157-2 assume !false; 30122#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 30121#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 30120#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 30119#L3165 assume 1 != cleanup_~tmp___0~9#1; 30118#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 30116#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 30111#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 30108#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 30103#L660 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 30093#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 30092#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 30091#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 30089#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 30088#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 30087#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 30080#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 30077#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 30054#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 30050#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 30049#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 30048#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 30047#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 30045#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 30034#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 30021#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 29998#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 29999#L1128-3 assume !(1 == ~currentHeading~0); 33909#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 30168#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 30154#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 30152#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 30151#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 30150#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 30148#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 30149#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 30139#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 30130#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 30126#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 30123#L3157-2 [2024-10-15 00:46:45,332 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:45,332 INFO L85 PathProgramCache]: Analyzing trace with hash 1133948127, now seen corresponding path program 1 times [2024-10-15 00:46:45,332 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:45,332 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [196536332] [2024-10-15 00:46:45,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:45,333 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:45,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:45,395 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:45,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:45,396 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [196536332] [2024-10-15 00:46:45,396 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [196536332] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:45,396 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:45,396 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:45,396 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1844438468] [2024-10-15 00:46:45,396 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:45,397 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:45,397 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:45,397 INFO L85 PathProgramCache]: Analyzing trace with hash -1052865458, now seen corresponding path program 1 times [2024-10-15 00:46:45,397 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:45,397 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1150638937] [2024-10-15 00:46:45,397 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:45,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:45,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:45,440 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:45,440 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:45,441 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1150638937] [2024-10-15 00:46:45,441 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1150638937] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:45,441 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:45,441 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:45,441 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1386864876] [2024-10-15 00:46:45,441 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:45,442 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:45,442 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:45,442 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:46:45,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:46:45,443 INFO L87 Difference]: Start difference. First operand 9182 states and 17092 transitions. cyclomatic complexity: 7911 Second operand has 5 states, 5 states have (on average 7.8) internal successors, (39), 5 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:45,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:45,671 INFO L93 Difference]: Finished difference Result 16555 states and 30818 transitions. [2024-10-15 00:46:45,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16555 states and 30818 transitions. [2024-10-15 00:46:45,739 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9200 [2024-10-15 00:46:45,806 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16555 states to 16555 states and 30818 transitions. [2024-10-15 00:46:45,807 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16555 [2024-10-15 00:46:45,824 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16555 [2024-10-15 00:46:45,824 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16555 states and 30818 transitions. [2024-10-15 00:46:45,845 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:45,845 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16555 states and 30818 transitions. [2024-10-15 00:46:45,861 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16555 states and 30818 transitions. [2024-10-15 00:46:46,129 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16555 to 16555. [2024-10-15 00:46:46,157 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16555 states, 16555 states have (on average 1.8615524010872848) internal successors, (30818), 16554 states have internal predecessors, (30818), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:46,188 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16555 states to 16555 states and 30818 transitions. [2024-10-15 00:46:46,188 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16555 states and 30818 transitions. [2024-10-15 00:46:46,191 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-15 00:46:46,193 INFO L425 stractBuchiCegarLoop]: Abstraction has 16555 states and 30818 transitions. [2024-10-15 00:46:46,193 INFO L332 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2024-10-15 00:46:46,193 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16555 states and 30818 transitions. [2024-10-15 00:46:46,240 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9200 [2024-10-15 00:46:46,241 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:46,241 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:46,244 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:46,244 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:46,245 INFO L745 eck$LassoCheckResult]: Stem: 53405#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 53406#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 54696#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 54158#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 54159#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 53085#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 53086#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 53239#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 53240#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 53423#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 53424#L2239 assume 0 == initPersonOnFloor_~floor#1; 53951#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 53090#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 53934#L2031 assume !(0 == callOnFloor_~floorID#1); 53839#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 53840#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 55433#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 53906#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 53907#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 55652#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 55650#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 55647#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 55648#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 56327#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 56324#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 56321#L1309 assume !(0 != timeShift_~tmp___9~2#1); 56319#L1400 assume !(1 == ~doorState~0); 56317#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 56314#L752 assume !(1 == stopRequestedInDirection_~dir#1); 56072#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 56067#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 56064#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 56062#L1128 assume !(1 == ~currentHeading~0); 55975#L1138 assume !(0 == ~currentFloorID~0); 55965#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55955#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55950#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 55944#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 55935#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 55934#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 55933#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 55912#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 55908#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 55906#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 55905#L3157-2 [2024-10-15 00:46:46,246 INFO L747 eck$LassoCheckResult]: Loop: 55905#L3157-2 assume !false; 55904#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 55903#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 55902#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 55899#L3165 assume 1 != cleanup_~tmp___0~9#1; 55897#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 55895#L1968-21 assume !(0 == isFloorCalling_~floorID#1); 55883#L1972-21 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 55871#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 55864#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 55855#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 55854#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 55853#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 55851#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 55850#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 55848#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 55841#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 55842#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 56276#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 56275#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 56273#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 56272#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 56271#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 56269#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 56270#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 55723#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 55724#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 56345#L1128-3 assume !(1 == ~currentHeading~0); 56092#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 56089#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 55979#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 55966#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 55956#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 55951#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 55949#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 55943#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 55929#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 55909#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 55907#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 55905#L3157-2 [2024-10-15 00:46:46,246 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:46,247 INFO L85 PathProgramCache]: Analyzing trace with hash 1133948127, now seen corresponding path program 2 times [2024-10-15 00:46:46,247 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:46,247 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1536365907] [2024-10-15 00:46:46,247 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:46,247 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:46,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:46,308 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:46,308 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:46,309 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1536365907] [2024-10-15 00:46:46,309 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1536365907] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:46,309 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:46,309 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:46,309 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827535320] [2024-10-15 00:46:46,309 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:46,309 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:46,309 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:46,309 INFO L85 PathProgramCache]: Analyzing trace with hash 896402275, now seen corresponding path program 1 times [2024-10-15 00:46:46,310 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:46,310 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951027281] [2024-10-15 00:46:46,310 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:46,310 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:46,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:46,342 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:46,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:46,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951027281] [2024-10-15 00:46:46,343 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1951027281] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:46,343 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:46,343 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:46,343 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1961906924] [2024-10-15 00:46:46,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:46,344 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:46,344 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:46,344 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-15 00:46:46,344 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-15 00:46:46,345 INFO L87 Difference]: Start difference. First operand 16555 states and 30818 transitions. cyclomatic complexity: 14264 Second operand has 3 states, 3 states have (on average 13.0) internal successors, (39), 3 states have internal predecessors, (39), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:46,843 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:46,843 INFO L93 Difference]: Finished difference Result 16327 states and 30344 transitions. [2024-10-15 00:46:46,843 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16327 states and 30344 transitions. [2024-10-15 00:46:46,900 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9020 [2024-10-15 00:46:46,948 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16327 states to 16327 states and 30344 transitions. [2024-10-15 00:46:46,948 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16327 [2024-10-15 00:46:46,972 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16327 [2024-10-15 00:46:46,972 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16327 states and 30344 transitions. [2024-10-15 00:46:46,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:46,986 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16327 states and 30344 transitions. [2024-10-15 00:46:46,999 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16327 states and 30344 transitions. [2024-10-15 00:46:47,243 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16327 to 16327. [2024-10-15 00:46:47,266 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16327 states, 16327 states have (on average 1.8585165676486801) internal successors, (30344), 16326 states have internal predecessors, (30344), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:47,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16327 states to 16327 states and 30344 transitions. [2024-10-15 00:46:47,296 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16327 states and 30344 transitions. [2024-10-15 00:46:47,296 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-15 00:46:47,298 INFO L425 stractBuchiCegarLoop]: Abstraction has 16327 states and 30344 transitions. [2024-10-15 00:46:47,298 INFO L332 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2024-10-15 00:46:47,298 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16327 states and 30344 transitions. [2024-10-15 00:46:47,344 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9020 [2024-10-15 00:46:47,345 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:47,345 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:47,349 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:47,349 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:47,350 INFO L745 eck$LassoCheckResult]: Stem: 86291#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 86292#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 87576#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 87039#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 87040#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 85973#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 85974#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 86127#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 86128#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 86309#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 86310#L2239 assume 0 == initPersonOnFloor_~floor#1; 86832#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 85978#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 86815#L2031 assume !(0 == callOnFloor_~floorID#1); 86722#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 86723#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 88947#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 88946#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 88944#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 88945#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 89041#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 89039#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 89030#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 89023#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 89016#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 89014#L1309 assume !(0 != timeShift_~tmp___9~2#1); 89013#L1400 assume !(1 == ~doorState~0); 88990#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 88986#L752 assume !(1 == stopRequestedInDirection_~dir#1); 88754#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 88689#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 88683#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 88674#L1128 assume !(1 == ~currentHeading~0); 88665#L1138 assume !(0 == ~currentFloorID~0); 88658#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88655#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 88652#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 88637#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 88638#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 89727#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 89726#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 88593#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 88588#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 88589#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 89596#L3157-2 [2024-10-15 00:46:47,351 INFO L747 eck$LassoCheckResult]: Loop: 89596#L3157-2 assume !false; 89595#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 89594#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 89593#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 89592#L3165 assume 1 != cleanup_~tmp___0~9#1; 89591#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 89590#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 89589#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 89587#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 89585#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 88536#L1968-22 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 85949#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 86306#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 86308#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 89469#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 89463#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 89464#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 89543#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 89266#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 89253#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 89251#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 89247#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 89246#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 89243#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 89242#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 89240#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 89238#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 89113#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 89097#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 89089#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 89082#L1128-3 assume !(1 == ~currentHeading~0); 89073#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 89067#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 89063#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 89062#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 89609#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 89608#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 89607#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 89606#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 89604#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 89598#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 89597#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 89596#L3157-2 [2024-10-15 00:46:47,351 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:47,351 INFO L85 PathProgramCache]: Analyzing trace with hash 1133948127, now seen corresponding path program 3 times [2024-10-15 00:46:47,352 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:47,352 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1008503453] [2024-10-15 00:46:47,352 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:47,352 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:47,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:47,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:47,396 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:47,397 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1008503453] [2024-10-15 00:46:47,397 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1008503453] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:47,397 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:47,398 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:47,398 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734347411] [2024-10-15 00:46:47,398 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:47,398 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:47,398 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:47,399 INFO L85 PathProgramCache]: Analyzing trace with hash 1798103928, now seen corresponding path program 1 times [2024-10-15 00:46:47,399 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:47,399 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1261627699] [2024-10-15 00:46:47,399 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:47,399 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:47,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:47,551 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:47,552 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:47,552 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1261627699] [2024-10-15 00:46:47,552 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1261627699] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:47,552 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:47,552 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:47,553 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [537903719] [2024-10-15 00:46:47,553 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:47,553 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:47,553 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:47,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:46:47,556 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:46:47,556 INFO L87 Difference]: Start difference. First operand 16327 states and 30344 transitions. cyclomatic complexity: 14018 Second operand has 5 states, 5 states have (on average 8.4) internal successors, (42), 5 states have internal predecessors, (42), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:48,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:48,322 INFO L93 Difference]: Finished difference Result 16327 states and 30200 transitions. [2024-10-15 00:46:48,322 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16327 states and 30200 transitions. [2024-10-15 00:46:48,399 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9020 [2024-10-15 00:46:48,462 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16327 states to 16327 states and 30200 transitions. [2024-10-15 00:46:48,462 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16327 [2024-10-15 00:46:48,492 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16327 [2024-10-15 00:46:48,493 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16327 states and 30200 transitions. [2024-10-15 00:46:48,513 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:48,513 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16327 states and 30200 transitions. [2024-10-15 00:46:48,529 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16327 states and 30200 transitions. [2024-10-15 00:46:48,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16327 to 16327. [2024-10-15 00:46:48,897 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16327 states, 16327 states have (on average 1.84969682121639) internal successors, (30200), 16326 states have internal predecessors, (30200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:48,929 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16327 states to 16327 states and 30200 transitions. [2024-10-15 00:46:48,929 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16327 states and 30200 transitions. [2024-10-15 00:46:48,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-15 00:46:48,930 INFO L425 stractBuchiCegarLoop]: Abstraction has 16327 states and 30200 transitions. [2024-10-15 00:46:48,930 INFO L332 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2024-10-15 00:46:48,930 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16327 states and 30200 transitions. [2024-10-15 00:46:48,976 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9020 [2024-10-15 00:46:48,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:48,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:48,980 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:48,980 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:48,981 INFO L745 eck$LassoCheckResult]: Stem: 118948#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 118949#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 120217#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 119693#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 119694#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 118635#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 118636#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 118787#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 118788#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 118967#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 118968#L2239 assume 0 == initPersonOnFloor_~floor#1; 119489#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 118640#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 119472#L2031 assume !(0 == callOnFloor_~floorID#1); 119378#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 119379#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 121526#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 121525#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 121523#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 121524#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 121609#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 121599#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 121588#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 121586#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 121585#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 121584#L1309 assume !(0 != timeShift_~tmp___9~2#1); 121583#L1400 assume !(1 == ~doorState~0); 121582#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121576#L752 assume !(1 == stopRequestedInDirection_~dir#1); 121342#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 121277#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 121271#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 121262#L1128 assume !(1 == ~currentHeading~0); 121253#L1138 assume !(0 == ~currentFloorID~0); 121246#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121243#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 121241#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 122135#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 122134#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 122133#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 121202#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 121203#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 122122#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 121173#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 121172#L3157-2 [2024-10-15 00:46:48,981 INFO L747 eck$LassoCheckResult]: Loop: 121172#L3157-2 assume !false; 121171#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 121170#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 121169#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 121168#L3165 assume 1 != cleanup_~tmp___0~9#1; 121167#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 121166#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 121165#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 121163#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 121160#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 121161#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 122077#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 122066#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 121877#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 121863#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 121861#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 121860#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 121858#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 121857#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 121856#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 121851#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 121850#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 121848#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 121847#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 121845#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 121844#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 121842#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 121838#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 121707#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 121691#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 121683#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 121676#L1128-3 assume !(1 == ~currentHeading~0); 121667#L1138-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 121661#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121657#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 121645#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 121643#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 121238#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 121233#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 121224#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 121197#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 121177#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 121174#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 121172#L3157-2 [2024-10-15 00:46:48,981 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:48,981 INFO L85 PathProgramCache]: Analyzing trace with hash 1133948127, now seen corresponding path program 4 times [2024-10-15 00:46:48,981 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:48,982 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1042258197] [2024-10-15 00:46:48,982 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:48,982 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:48,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:49,034 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:49,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:49,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1042258197] [2024-10-15 00:46:49,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1042258197] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:49,035 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:49,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:49,036 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [665686713] [2024-10-15 00:46:49,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:49,036 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:49,036 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:49,036 INFO L85 PathProgramCache]: Analyzing trace with hash 1095892614, now seen corresponding path program 1 times [2024-10-15 00:46:49,037 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:49,037 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [720353530] [2024-10-15 00:46:49,037 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:49,037 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:49,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:49,081 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:49,081 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:49,081 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [720353530] [2024-10-15 00:46:49,082 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [720353530] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:49,082 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:49,082 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:49,082 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2143323959] [2024-10-15 00:46:49,082 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:49,082 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:49,082 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:49,083 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:49,083 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:49,083 INFO L87 Difference]: Start difference. First operand 16327 states and 30200 transitions. cyclomatic complexity: 13874 Second operand has 4 states, 4 states have (on average 10.75) internal successors, (43), 4 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:49,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:49,265 INFO L93 Difference]: Finished difference Result 16356 states and 30229 transitions. [2024-10-15 00:46:49,265 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16356 states and 30229 transitions. [2024-10-15 00:46:49,326 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9038 [2024-10-15 00:46:49,374 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16356 states to 16356 states and 30229 transitions. [2024-10-15 00:46:49,374 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16356 [2024-10-15 00:46:49,389 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16356 [2024-10-15 00:46:49,390 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16356 states and 30229 transitions. [2024-10-15 00:46:49,406 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:49,407 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16356 states and 30229 transitions. [2024-10-15 00:46:49,419 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16356 states and 30229 transitions. [2024-10-15 00:46:49,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16356 to 16345. [2024-10-15 00:46:49,707 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16345 states, 16345 states have (on average 1.8487610890180484) internal successors, (30218), 16344 states have internal predecessors, (30218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:49,732 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16345 states to 16345 states and 30218 transitions. [2024-10-15 00:46:49,733 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16345 states and 30218 transitions. [2024-10-15 00:46:49,734 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:49,735 INFO L425 stractBuchiCegarLoop]: Abstraction has 16345 states and 30218 transitions. [2024-10-15 00:46:49,735 INFO L332 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2024-10-15 00:46:49,735 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16345 states and 30218 transitions. [2024-10-15 00:46:49,777 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9032 [2024-10-15 00:46:49,777 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:49,777 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:49,781 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:49,781 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:49,781 INFO L745 eck$LassoCheckResult]: Stem: 151639#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 151640#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 152925#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 152392#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 152393#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 151326#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 151327#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 151478#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 151479#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 151658#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 151659#L2239 assume 0 == initPersonOnFloor_~floor#1; 152184#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 151331#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 152167#L2031 assume !(0 == callOnFloor_~floorID#1); 152072#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 152073#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 153036#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 152139#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 152140#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 154172#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 154171#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 154167#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 154160#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 154158#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 154157#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 154155#L1309 assume !(0 != timeShift_~tmp___9~2#1); 154154#L1400 assume !(1 == ~doorState~0); 154151#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 154149#L752 assume !(1 == stopRequestedInDirection_~dir#1); 154150#L921 assume !(0 == ~currentFloorID~0); 152640#L927 assume !(~currentFloorID~0 > 0); 153090#$Ultimate##2326 assume ~currentFloorID~0 > 0; 152687#L944 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 152688#L945 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 153033#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 166080#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 166079#L1128 assume !(1 == ~currentHeading~0); 166076#L1138 assume !(0 == ~currentFloorID~0); 166075#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 166074#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 166070#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 166069#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 166067#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 166065#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 166066#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 166048#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 166035#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 166032#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 166031#L3157-2 [2024-10-15 00:46:49,782 INFO L747 eck$LassoCheckResult]: Loop: 166031#L3157-2 assume !false; 166030#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 166029#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 166028#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 166027#L3165 assume 1 != cleanup_~tmp___0~9#1; 165972#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 165971#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 165970#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 165182#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 165183#L660 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 154654#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 167233#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 167232#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 167231#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 153184#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 153185#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 165723#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 165728#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 165726#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 165724#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 165725#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 166308#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 166304#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 166301#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 166300#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 166295#L921-2 assume !(0 == ~currentFloorID~0); 166296#L927-2 assume !(~currentFloorID~0 > 0); 166465#$Ultimate##5010 assume ~currentFloorID~0 > 0; 166503#L944-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 166477#L945-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 154528#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 166593#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 166592#L1128-3 assume !(1 == ~currentHeading~0); 166591#L1138-9 assume !(0 == ~currentFloorID~0); 165355#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 166186#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 166182#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 166179#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 166178#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 166176#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 166174#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 166044#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 166034#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 166033#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 166031#L3157-2 [2024-10-15 00:46:49,782 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:49,782 INFO L85 PathProgramCache]: Analyzing trace with hash -514683192, now seen corresponding path program 1 times [2024-10-15 00:46:49,782 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:49,783 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2095567822] [2024-10-15 00:46:49,783 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:49,783 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:49,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:49,844 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:49,845 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:49,845 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2095567822] [2024-10-15 00:46:49,845 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2095567822] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:49,845 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:49,846 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:49,846 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [680308827] [2024-10-15 00:46:49,846 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:49,846 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:49,846 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:49,846 INFO L85 PathProgramCache]: Analyzing trace with hash -1738219426, now seen corresponding path program 1 times [2024-10-15 00:46:49,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:49,848 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [81201421] [2024-10-15 00:46:49,848 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:49,848 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:49,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:49,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:49,897 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:49,897 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [81201421] [2024-10-15 00:46:49,897 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [81201421] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:49,897 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:49,897 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:49,897 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [504480917] [2024-10-15 00:46:49,897 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:49,897 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:49,897 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:49,897 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:46:49,898 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:46:49,898 INFO L87 Difference]: Start difference. First operand 16345 states and 30218 transitions. cyclomatic complexity: 13874 Second operand has 5 states, 5 states have (on average 8.8) internal successors, (44), 5 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:50,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:50,745 INFO L93 Difference]: Finished difference Result 12456 states and 22901 transitions. [2024-10-15 00:46:50,745 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12456 states and 22901 transitions. [2024-10-15 00:46:50,800 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9085 [2024-10-15 00:46:50,838 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12456 states to 12456 states and 22901 transitions. [2024-10-15 00:46:50,839 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12456 [2024-10-15 00:46:50,849 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12456 [2024-10-15 00:46:50,850 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12456 states and 22901 transitions. [2024-10-15 00:46:50,865 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:50,866 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12456 states and 22901 transitions. [2024-10-15 00:46:50,875 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12456 states and 22901 transitions. [2024-10-15 00:46:50,999 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12456 to 12447. [2024-10-15 00:46:51,014 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12447 states, 12447 states have (on average 1.8386759861814093) internal successors, (22886), 12446 states have internal predecessors, (22886), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:51,038 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12447 states to 12447 states and 22886 transitions. [2024-10-15 00:46:51,039 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12447 states and 22886 transitions. [2024-10-15 00:46:51,041 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-10-15 00:46:51,042 INFO L425 stractBuchiCegarLoop]: Abstraction has 12447 states and 22886 transitions. [2024-10-15 00:46:51,042 INFO L332 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2024-10-15 00:46:51,042 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12447 states and 22886 transitions. [2024-10-15 00:46:51,084 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9076 [2024-10-15 00:46:51,085 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:51,085 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:51,086 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:51,086 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:51,087 INFO L745 eck$LassoCheckResult]: Stem: 180437#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 180438#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 181653#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 181156#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 181157#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 180140#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 180141#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 180281#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 180282#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 180453#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 180454#L2239 assume 0 == initPersonOnFloor_~floor#1; 180964#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 180145#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 180946#L2031 assume !(0 == callOnFloor_~floorID#1); 180851#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 180852#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 182366#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 182589#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 182588#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 182587#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 182586#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 181814#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 181778#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 181779#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 182565#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 182591#L1309 assume !(0 != timeShift_~tmp___9~2#1); 180500#L1400 assume !(1 == ~doorState~0); 180501#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 181425#L752 assume !(1 == stopRequestedInDirection_~dir#1); 181384#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 181385#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 181631#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 181632#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 182089#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 180151#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 180152#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 180498#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 182078#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 182081#L1128-2 assume !(1 == ~currentHeading~0); 181247#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 181248#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 180120#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 180121#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 185350#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 185349#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 185347#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 185348#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 185334#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 185331#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 185285#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 185284#L3157-2 [2024-10-15 00:46:51,087 INFO L747 eck$LassoCheckResult]: Loop: 185284#L3157-2 assume !false; 185283#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 185282#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 185281#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 185280#L3165 assume 1 != cleanup_~tmp___0~9#1; 185279#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 185278#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 185277#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 185275#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 185273#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 185272#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 185270#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 185267#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 184992#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 184950#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 184948#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 184946#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 184944#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 184942#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 184865#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 184861#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 184862#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 185607#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 185575#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 185572#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 185568#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 185566#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 185563#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 185564#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 185558#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 186319#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 186276#L1183-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 186274#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 186271#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 182201#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 182202#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 188389#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 188373#L1128-5 assume !(1 == ~currentHeading~0); 188368#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 185313#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 185312#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 185307#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 185304#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 185303#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 185301#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 185299#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 185296#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 185287#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 185286#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 185284#L3157-2 [2024-10-15 00:46:51,088 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:51,088 INFO L85 PathProgramCache]: Analyzing trace with hash -145495866, now seen corresponding path program 1 times [2024-10-15 00:46:51,088 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:51,089 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [848363555] [2024-10-15 00:46:51,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:51,089 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:51,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:51,153 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:51,267 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:51,267 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [848363555] [2024-10-15 00:46:51,267 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [848363555] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:51,267 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:51,267 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:51,268 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683528738] [2024-10-15 00:46:51,268 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:51,268 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:51,268 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:51,269 INFO L85 PathProgramCache]: Analyzing trace with hash 1767228339, now seen corresponding path program 1 times [2024-10-15 00:46:51,269 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:51,269 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252713629] [2024-10-15 00:46:51,269 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:51,269 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:51,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:51,307 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:51,307 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:51,308 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252713629] [2024-10-15 00:46:51,308 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [252713629] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:51,308 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:51,308 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:51,308 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1996984291] [2024-10-15 00:46:51,308 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:51,309 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:51,309 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:51,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:51,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:51,309 INFO L87 Difference]: Start difference. First operand 12447 states and 22886 transitions. cyclomatic complexity: 10440 Second operand has 4 states, 4 states have (on average 12.25) internal successors, (49), 4 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:51,389 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:51,390 INFO L93 Difference]: Finished difference Result 12465 states and 22904 transitions. [2024-10-15 00:46:51,390 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 12465 states and 22904 transitions. [2024-10-15 00:46:51,435 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9091 [2024-10-15 00:46:51,465 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 12465 states to 12465 states and 22904 transitions. [2024-10-15 00:46:51,465 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 12465 [2024-10-15 00:46:51,475 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 12465 [2024-10-15 00:46:51,475 INFO L73 IsDeterministic]: Start isDeterministic. Operand 12465 states and 22904 transitions. [2024-10-15 00:46:51,486 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:51,487 INFO L218 hiAutomatonCegarLoop]: Abstraction has 12465 states and 22904 transitions. [2024-10-15 00:46:51,495 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12465 states and 22904 transitions. [2024-10-15 00:46:51,585 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12465 to 12459. [2024-10-15 00:46:51,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12459 states, 12459 states have (on average 1.837868207721326) internal successors, (22898), 12458 states have internal predecessors, (22898), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:51,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12459 states to 12459 states and 22898 transitions. [2024-10-15 00:46:51,617 INFO L240 hiAutomatonCegarLoop]: Abstraction has 12459 states and 22898 transitions. [2024-10-15 00:46:51,617 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:51,618 INFO L425 stractBuchiCegarLoop]: Abstraction has 12459 states and 22898 transitions. [2024-10-15 00:46:51,618 INFO L332 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2024-10-15 00:46:51,619 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12459 states and 22898 transitions. [2024-10-15 00:46:51,649 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9086 [2024-10-15 00:46:51,650 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:51,650 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:51,651 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:51,651 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:51,651 INFO L745 eck$LassoCheckResult]: Stem: 205354#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 205355#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 206585#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 206076#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 206077#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 205063#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 205064#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 205200#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 205201#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 205373#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 205374#L2239 assume 0 == initPersonOnFloor_~floor#1; 205887#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 205066#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 205870#L2031 assume !(0 == callOnFloor_~floorID#1); 205774#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 205775#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 207335#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 207575#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 207574#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 207573#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 207572#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 206757#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 206721#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 206722#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 207543#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 207578#L1309 assume !(0 != timeShift_~tmp___9~2#1); 205419#L1400 assume !(1 == ~doorState~0); 205420#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 206352#L752 assume !(1 == stopRequestedInDirection_~dir#1); 206310#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 206311#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 206561#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 206562#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 207406#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 207577#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 206282#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 205415#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 207026#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 207027#L1128-2 assume !(1 == ~currentHeading~0); 206168#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 206169#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 205042#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 205043#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 207635#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 207634#L165 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 207629#L166 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 207618#areDoorsOpen_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 207619#L170 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 207602#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 207603#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 209769#L3157-2 [2024-10-15 00:46:51,651 INFO L747 eck$LassoCheckResult]: Loop: 209769#L3157-2 assume !false; 209766#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 209763#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 209760#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 209757#L3165 assume 1 != cleanup_~tmp___0~9#1; 209754#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 209751#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 209748#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 209743#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 209738#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 209739#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 210458#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 214227#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 214226#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 210420#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 210421#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 210415#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 210416#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 210412#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 213485#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 204959#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 204960#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 206124#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 209718#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 209716#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 206228#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 206229#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 207171#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 207089#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 207090#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 210559#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 210013#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 210554#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 210555#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 211331#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 205045#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 211438#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 211437#L1128-5 assume !(1 == ~currentHeading~0); 209974#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 209972#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 209971#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 209968#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 209961#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 209959#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 209957#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 209958#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 209799#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 209776#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 209772#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 209769#L3157-2 [2024-10-15 00:46:51,652 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:51,652 INFO L85 PathProgramCache]: Analyzing trace with hash -145495866, now seen corresponding path program 2 times [2024-10-15 00:46:51,652 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:51,652 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [818641485] [2024-10-15 00:46:51,652 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:51,652 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:51,665 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:51,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:51,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:51,696 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [818641485] [2024-10-15 00:46:51,696 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [818641485] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:51,696 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:51,696 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:51,696 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933837076] [2024-10-15 00:46:51,696 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:51,697 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:51,697 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:51,697 INFO L85 PathProgramCache]: Analyzing trace with hash -226916367, now seen corresponding path program 1 times [2024-10-15 00:46:51,697 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:51,698 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [189989694] [2024-10-15 00:46:51,698 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:51,698 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:51,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:51,893 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:51,893 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:51,894 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [189989694] [2024-10-15 00:46:51,894 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [189989694] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:51,894 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:51,895 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:51,895 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [206221688] [2024-10-15 00:46:51,895 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:51,895 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:51,895 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:51,895 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-15 00:46:51,895 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2024-10-15 00:46:51,896 INFO L87 Difference]: Start difference. First operand 12459 states and 22898 transitions. cyclomatic complexity: 10440 Second operand has 7 states, 7 states have (on average 7.0) internal successors, (49), 7 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:52,758 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:52,758 INFO L93 Difference]: Finished difference Result 17047 states and 31302 transitions. [2024-10-15 00:46:52,758 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17047 states and 31302 transitions. [2024-10-15 00:46:52,821 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13656 [2024-10-15 00:46:52,870 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17047 states to 17047 states and 31302 transitions. [2024-10-15 00:46:52,870 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17047 [2024-10-15 00:46:52,886 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17047 [2024-10-15 00:46:52,886 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17047 states and 31302 transitions. [2024-10-15 00:46:52,905 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:52,905 INFO L218 hiAutomatonCegarLoop]: Abstraction has 17047 states and 31302 transitions. [2024-10-15 00:46:52,918 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17047 states and 31302 transitions. [2024-10-15 00:46:53,130 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17047 to 16338. [2024-10-15 00:46:53,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16338 states, 16338 states have (on average 1.8412902436038683) internal successors, (30083), 16337 states have internal predecessors, (30083), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:53,173 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16338 states to 16338 states and 30083 transitions. [2024-10-15 00:46:53,174 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16338 states and 30083 transitions. [2024-10-15 00:46:53,174 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2024-10-15 00:46:53,174 INFO L425 stractBuchiCegarLoop]: Abstraction has 16338 states and 30083 transitions. [2024-10-15 00:46:53,174 INFO L332 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2024-10-15 00:46:53,174 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16338 states and 30083 transitions. [2024-10-15 00:46:53,220 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:53,220 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:53,220 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:53,226 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:53,226 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:53,226 INFO L745 eck$LassoCheckResult]: Stem: 234884#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 234885#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 236107#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 235603#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 235604#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 234588#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 234589#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 234728#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 234729#L1810 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 234903#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 234904#L2239 assume 0 == initPersonOnFloor_~floor#1; 235413#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 234591#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 235394#L2031 assume !(0 == callOnFloor_~floorID#1); 235299#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 235300#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 236853#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 237114#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 237113#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 237112#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 237111#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 236276#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 236239#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 236240#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 237077#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 237117#L1309 assume !(0 != timeShift_~tmp___9~2#1); 234949#L1400 assume !(1 == ~doorState~0); 234950#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 235875#L752 assume !(1 == stopRequestedInDirection_~dir#1); 235833#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 235834#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 236084#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 236085#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 236931#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 237116#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 235803#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 234945#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 236554#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 236555#L1128-2 assume !(1 == ~currentHeading~0); 235694#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 235695#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 234568#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 234569#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 236568#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 235896#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 235897#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 239283#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 239287#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 239280#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 239278#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 239276#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 239275#L3157-2 [2024-10-15 00:46:53,227 INFO L747 eck$LassoCheckResult]: Loop: 239275#L3157-2 assume !false; 239274#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 239273#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 239272#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 239271#L3165 assume 1 != cleanup_~tmp___0~9#1; 239270#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 239269#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 239268#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 239266#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 239267#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 243830#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 243829#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 243532#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 243529#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 243527#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 243526#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 237026#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 236752#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 236452#L1311-2 assume !(0 != ~persons_0~0); 234991#L1311-3 assume !(0 != ~persons_1~0); 234968#L1325-1 assume !(0 != ~persons_2~0); 248177#L1339-1 assume !(0 != ~persons_3~0); 248172#L1353-1 assume !(0 != ~persons_4~0); 248169#L1367-1 assume !(0 != ~persons_5~0); 248160#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 248158#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 248127#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 248115#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 248113#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 248111#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 248110#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 248010#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 247978#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 247976#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 247974#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 247973#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 247922#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 247903#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 247901#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 247899#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 247898#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 247871#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 247862#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 247860#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 247861#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 250317#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 250297#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 250269#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 250268#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 250266#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 250265#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 250246#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 250230#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 250228#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 250229#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 250489#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 234761#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 235832#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 235506#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 235036#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 234855#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 236281#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 235151#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 235152#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 234618#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 237012#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 236056#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 236055#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 239277#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 239275#L3157-2 [2024-10-15 00:46:53,227 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:53,227 INFO L85 PathProgramCache]: Analyzing trace with hash 2093642904, now seen corresponding path program 1 times [2024-10-15 00:46:53,228 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:53,228 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [498428757] [2024-10-15 00:46:53,228 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:53,228 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:53,245 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:53,284 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:53,284 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:53,284 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [498428757] [2024-10-15 00:46:53,284 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [498428757] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:53,284 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:53,284 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:53,284 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704742902] [2024-10-15 00:46:53,284 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:53,285 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:53,285 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:53,285 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 1 times [2024-10-15 00:46:53,285 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:53,285 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1610930534] [2024-10-15 00:46:53,285 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:53,285 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:53,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:53,358 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:53,359 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:53,359 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1610930534] [2024-10-15 00:46:53,359 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1610930534] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:53,359 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:53,359 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:53,359 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1121873209] [2024-10-15 00:46:53,359 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:53,359 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:53,359 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:53,360 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-15 00:46:53,360 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-15 00:46:53,360 INFO L87 Difference]: Start difference. First operand 16338 states and 30083 transitions. cyclomatic complexity: 13746 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:53,427 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:53,428 INFO L93 Difference]: Finished difference Result 16338 states and 30077 transitions. [2024-10-15 00:46:53,428 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16338 states and 30077 transitions. [2024-10-15 00:46:53,494 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:53,542 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16338 states to 16338 states and 30077 transitions. [2024-10-15 00:46:53,542 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16338 [2024-10-15 00:46:53,557 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16338 [2024-10-15 00:46:53,558 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16338 states and 30077 transitions. [2024-10-15 00:46:53,571 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:53,572 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16338 states and 30077 transitions. [2024-10-15 00:46:53,586 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16338 states and 30077 transitions. [2024-10-15 00:46:53,928 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16338 to 16338. [2024-10-15 00:46:53,945 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16338 states, 16338 states have (on average 1.840923001591382) internal successors, (30077), 16337 states have internal predecessors, (30077), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:53,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16338 states to 16338 states and 30077 transitions. [2024-10-15 00:46:53,983 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16338 states and 30077 transitions. [2024-10-15 00:46:53,984 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-15 00:46:53,984 INFO L425 stractBuchiCegarLoop]: Abstraction has 16338 states and 30077 transitions. [2024-10-15 00:46:53,984 INFO L332 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2024-10-15 00:46:53,985 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16338 states and 30077 transitions. [2024-10-15 00:46:54,044 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:54,044 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:54,044 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:54,049 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:54,050 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:54,050 INFO L745 eck$LassoCheckResult]: Stem: 267569#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 267570#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 268776#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 268281#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 268282#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 267274#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 267275#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 267412#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 267413#L1810 assume !(0 == getOrigin_~person#1); 269501#L1814 assume !(1 == getOrigin_~person#1); 269589#L1818 assume !(2 == getOrigin_~person#1); 267601#L1822 assume !(3 == getOrigin_~person#1); 267602#L1826 assume !(4 == getOrigin_~person#1); 269634#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 267588#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 267589#L2239 assume 0 == initPersonOnFloor_~floor#1; 268091#L2240 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 267277#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 268074#L2031 assume !(0 == callOnFloor_~floorID#1); 267981#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 267982#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 269476#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 269675#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 269674#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 269673#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 269672#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 268933#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 268899#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 268900#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 269659#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 269678#L1309 assume !(0 != timeShift_~tmp___9~2#1); 267634#L1400 assume !(1 == ~doorState~0); 267635#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 268545#L752 assume !(1 == stopRequestedInDirection_~dir#1); 268507#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 268508#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 268752#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 268753#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 269546#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 269677#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 268478#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 267630#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 269200#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 269201#L1128-2 assume !(1 == ~currentHeading~0); 268370#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 268371#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 267254#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 267255#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 274582#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 274575#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 274570#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 274559#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 274563#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 274556#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 274554#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 274234#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 274235#L3157-2 [2024-10-15 00:46:54,051 INFO L747 eck$LassoCheckResult]: Loop: 274235#L3157-2 assume !false; 276716#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 276715#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 276714#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 276713#L3165 assume 1 != cleanup_~tmp___0~9#1; 276712#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 276711#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 276710#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 276709#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 267499#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 267500#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 269002#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 268892#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 268712#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 267470#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 267340#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 267341#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 276641#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 276634#L1311-2 assume !(0 != ~persons_0~0); 276628#L1311-3 assume !(0 != ~persons_1~0); 276623#L1325-1 assume !(0 != ~persons_2~0); 276612#L1339-1 assume !(0 != ~persons_3~0); 276575#L1353-1 assume !(0 != ~persons_4~0); 276571#L1367-1 assume !(0 != ~persons_5~0); 276567#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276566#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 276446#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 276434#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 276432#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 276430#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276428#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 276354#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 276322#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 276320#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 276318#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276317#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 276208#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 276189#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 276187#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 276185#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276184#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 276079#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 276069#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 276067#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 276063#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276061#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 276052#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 276022#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 276020#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 276018#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 276017#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 275995#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 275973#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 275968#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 275970#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 275960#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 275956#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 275955#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 275953#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 275932#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 275929#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 275928#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 275926#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 275927#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 276720#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 276725#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 276723#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 276718#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 276717#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 274235#L3157-2 [2024-10-15 00:46:54,051 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:54,051 INFO L85 PathProgramCache]: Analyzing trace with hash -1572125081, now seen corresponding path program 1 times [2024-10-15 00:46:54,051 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:54,052 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [728283204] [2024-10-15 00:46:54,052 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:54,052 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:54,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:54,149 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:54,149 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:54,150 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [728283204] [2024-10-15 00:46:54,150 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [728283204] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:54,151 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:54,151 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2024-10-15 00:46:54,152 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [685569541] [2024-10-15 00:46:54,152 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:54,152 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:54,152 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:54,152 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 2 times [2024-10-15 00:46:54,153 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:54,153 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [139581245] [2024-10-15 00:46:54,153 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:54,153 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:54,167 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:54,407 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:54,408 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:54,408 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [139581245] [2024-10-15 00:46:54,408 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [139581245] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:54,408 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:54,409 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:54,409 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [530924871] [2024-10-15 00:46:54,409 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:54,409 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:54,409 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:54,409 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-10-15 00:46:54,409 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-15 00:46:54,410 INFO L87 Difference]: Start difference. First operand 16338 states and 30077 transitions. cyclomatic complexity: 13740 Second operand has 6 states, 6 states have (on average 9.333333333333334) internal successors, (56), 6 states have internal predecessors, (56), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:54,508 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:54,508 INFO L93 Difference]: Finished difference Result 16332 states and 30064 transitions. [2024-10-15 00:46:54,508 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16332 states and 30064 transitions. [2024-10-15 00:46:54,564 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:54,599 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16332 states to 16332 states and 30064 transitions. [2024-10-15 00:46:54,600 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16332 [2024-10-15 00:46:54,611 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16332 [2024-10-15 00:46:54,611 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16332 states and 30064 transitions. [2024-10-15 00:46:54,623 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:54,623 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16332 states and 30064 transitions. [2024-10-15 00:46:54,631 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16332 states and 30064 transitions. [2024-10-15 00:46:54,860 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16332 to 16332. [2024-10-15 00:46:54,872 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16332 states, 16332 states have (on average 1.8408033308841538) internal successors, (30064), 16331 states have internal predecessors, (30064), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:54,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16332 states to 16332 states and 30064 transitions. [2024-10-15 00:46:54,897 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16332 states and 30064 transitions. [2024-10-15 00:46:54,897 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2024-10-15 00:46:54,898 INFO L425 stractBuchiCegarLoop]: Abstraction has 16332 states and 30064 transitions. [2024-10-15 00:46:54,898 INFO L332 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2024-10-15 00:46:54,898 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16332 states and 30064 transitions. [2024-10-15 00:46:54,942 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:54,943 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:54,943 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:54,946 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:54,946 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:54,947 INFO L745 eck$LassoCheckResult]: Stem: 300251#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 300252#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 301458#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 300954#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 300955#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 299958#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 299959#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 300096#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 300097#L1810 assume !(0 == getOrigin_~person#1); 302174#L1814 assume !(1 == getOrigin_~person#1); 302256#L1818 assume !(2 == getOrigin_~person#1); 300283#L1822 assume !(3 == getOrigin_~person#1); 300284#L1826 assume !(4 == getOrigin_~person#1); 302303#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 300270#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 300271#L2239 assume !(0 == initPersonOnFloor_~floor#1); 300592#L2266 assume 1 == initPersonOnFloor_~floor#1; 300593#L2267 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_1~0 := 1; 299961#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 300750#L2031 assume !(0 == callOnFloor_~floorID#1); 300657#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 300658#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 302148#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 302353#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 302352#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 302351#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 302350#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 301614#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 301578#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 301579#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 302330#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 302356#L1309 assume !(0 != timeShift_~tmp___9~2#1); 300316#L1400 assume !(1 == ~doorState~0); 300317#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 301226#L752 assume !(1 == stopRequestedInDirection_~dir#1); 301185#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 301186#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 301435#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 301436#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 302214#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 302355#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 301156#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 300312#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 301876#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 301877#L1128-2 assume !(1 == ~currentHeading~0); 301042#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 301043#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 299938#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 299939#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 302510#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 302509#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 302508#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 302497#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 302501#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 302494#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 302492#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 302489#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 302490#L3157-2 [2024-10-15 00:46:54,947 INFO L747 eck$LassoCheckResult]: Loop: 302490#L3157-2 assume !false; 302485#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 302486#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 302481#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 302482#L3165 assume 1 != cleanup_~tmp___0~9#1; 302477#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 302478#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 302390#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 302391#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 305267#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 306837#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 306836#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 306835#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 306832#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 306826#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 306822#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 306820#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 306819#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 306811#L1311-2 assume !(0 != ~persons_0~0); 306805#L1311-3 assume !(0 != ~persons_1~0); 306800#L1325-1 assume !(0 != ~persons_2~0); 306789#L1339-1 assume !(0 != ~persons_3~0); 306752#L1353-1 assume !(0 != ~persons_4~0); 306748#L1367-1 assume !(0 != ~persons_5~0); 306738#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 306736#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 306705#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 306693#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 306691#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 306689#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 306681#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 306317#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 306285#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 306283#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 306281#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 306280#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 306259#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 306240#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 306237#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 306234#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 306231#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 306043#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 306033#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 306031#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 306029#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 306028#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 306016#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 305986#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 305984#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 305982#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 305981#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 305634#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 305612#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 305608#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 305607#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 305463#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 305458#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 305456#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 305455#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 305316#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 305313#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 305312#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 305311#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 305310#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 302564#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 302565#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 302513#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 302514#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 302491#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 302490#L3157-2 [2024-10-15 00:46:54,947 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:54,947 INFO L85 PathProgramCache]: Analyzing trace with hash -1633865180, now seen corresponding path program 1 times [2024-10-15 00:46:54,948 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:54,948 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [70505849] [2024-10-15 00:46:54,948 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:54,948 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:54,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:55,011 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:55,011 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:55,011 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [70505849] [2024-10-15 00:46:55,011 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [70505849] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:55,011 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:55,012 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:55,012 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119967988] [2024-10-15 00:46:55,012 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:55,012 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:55,013 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:55,013 INFO L85 PathProgramCache]: Analyzing trace with hash -1039420419, now seen corresponding path program 1 times [2024-10-15 00:46:55,013 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:55,013 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1061389038] [2024-10-15 00:46:55,013 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:55,013 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:55,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:55,075 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:55,075 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:55,075 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1061389038] [2024-10-15 00:46:55,075 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1061389038] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:55,075 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:55,075 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:55,075 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1464696567] [2024-10-15 00:46:55,076 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:55,076 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:55,076 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:55,076 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:55,077 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:55,077 INFO L87 Difference]: Start difference. First operand 16332 states and 30064 transitions. cyclomatic complexity: 13733 Second operand has 4 states, 4 states have (on average 14.25) internal successors, (57), 4 states have internal predecessors, (57), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:55,198 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:55,198 INFO L93 Difference]: Finished difference Result 16342 states and 30075 transitions. [2024-10-15 00:46:55,198 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16342 states and 30075 transitions. [2024-10-15 00:46:55,261 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:55,508 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16342 states to 16342 states and 30075 transitions. [2024-10-15 00:46:55,509 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16342 [2024-10-15 00:46:55,523 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16342 [2024-10-15 00:46:55,523 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16342 states and 30075 transitions. [2024-10-15 00:46:55,531 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:55,531 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16342 states and 30075 transitions. [2024-10-15 00:46:55,538 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16342 states and 30075 transitions. [2024-10-15 00:46:55,640 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16342 to 16332. [2024-10-15 00:46:55,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16332 states, 16332 states have (on average 1.8405584129316679) internal successors, (30060), 16331 states have internal predecessors, (30060), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:55,677 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16332 states to 16332 states and 30060 transitions. [2024-10-15 00:46:55,678 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16332 states and 30060 transitions. [2024-10-15 00:46:55,678 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:55,678 INFO L425 stractBuchiCegarLoop]: Abstraction has 16332 states and 30060 transitions. [2024-10-15 00:46:55,679 INFO L332 stractBuchiCegarLoop]: ======== Iteration 14 ============ [2024-10-15 00:46:55,679 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16332 states and 30060 transitions. [2024-10-15 00:46:55,719 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:55,719 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:55,719 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:55,723 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:55,723 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:55,724 INFO L745 eck$LassoCheckResult]: Stem: 332937#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 332938#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 334142#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 333640#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 333641#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 332643#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 332644#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 332781#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 332782#L1810 assume !(0 == getOrigin_~person#1); 334881#L1814 assume !(1 == getOrigin_~person#1); 334967#L1818 assume !(2 == getOrigin_~person#1); 332969#L1822 assume !(3 == getOrigin_~person#1); 332970#L1826 assume !(4 == getOrigin_~person#1); 335029#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 332956#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 332957#L2239 assume !(0 == initPersonOnFloor_~floor#1); 333275#L2266 assume 1 == initPersonOnFloor_~floor#1; 333276#L2267 assume !(0 == initPersonOnFloor_~person#1); 333850#L2270 assume 1 == initPersonOnFloor_~person#1;~personOnFloor_1_1~0 := 1; 332646#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 333436#L2031 assume !(0 == callOnFloor_~floorID#1); 333344#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 333345#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 335084#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 335083#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 335082#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 335081#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 335080#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 334306#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 334267#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 334268#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 335056#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 335087#L1309 assume !(0 != timeShift_~tmp___9~2#1); 333002#L1400 assume !(1 == ~doorState~0); 333003#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 333908#L752 assume !(1 == stopRequestedInDirection_~dir#1); 333868#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 333869#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 334119#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 334120#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 334923#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 335086#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 333839#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 332998#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 334565#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 334566#L1128-2 assume !(1 == ~currentHeading~0); 333730#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 333731#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 332623#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 332624#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 340396#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 333928#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 333929#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 335401#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 335405#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 335398#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 335396#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 335393#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 335394#L3157-2 [2024-10-15 00:46:55,726 INFO L747 eck$LassoCheckResult]: Loop: 335394#L3157-2 assume !false; 338839#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 338838#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 338837#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 338836#L3165 assume 1 != cleanup_~tmp___0~9#1; 338835#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 338834#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 338833#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 338831#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 338832#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 348621#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 334905#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 334906#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 340528#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 340522#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 340519#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 340517#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 340514#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 340507#L1311-2 assume !(0 != ~persons_0~0); 340501#L1311-3 assume !(0 != ~persons_1~0); 340496#L1325-1 assume !(0 != ~persons_2~0); 340485#L1339-1 assume !(0 != ~persons_3~0); 340448#L1353-1 assume !(0 != ~persons_4~0); 340444#L1367-1 assume !(0 != ~persons_5~0); 340440#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 340439#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 340414#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 340403#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 340401#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 340402#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 342068#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 342067#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 342030#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 342027#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 342025#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 342024#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 339213#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 339194#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 339192#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 339188#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 339187#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 339140#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 339130#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 339128#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 339126#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 339125#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 339113#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 339083#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 339081#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 339079#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 339078#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 339046#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 339030#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 339028#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 339029#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 338899#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 338894#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 338877#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 338876#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 338861#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 338858#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 338857#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 338856#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 338855#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 338854#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 335437#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 335438#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 338841#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 338840#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 335394#L3157-2 [2024-10-15 00:46:55,726 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:55,726 INFO L85 PathProgramCache]: Analyzing trace with hash -458398652, now seen corresponding path program 1 times [2024-10-15 00:46:55,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:55,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [600533469] [2024-10-15 00:46:55,726 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:55,727 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:55,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:55,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:55,779 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:55,779 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [600533469] [2024-10-15 00:46:55,779 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [600533469] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:55,779 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:55,780 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:55,780 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1788160255] [2024-10-15 00:46:55,780 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:55,780 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:55,780 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:55,781 INFO L85 PathProgramCache]: Analyzing trace with hash -1039420419, now seen corresponding path program 2 times [2024-10-15 00:46:55,781 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:55,781 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905613939] [2024-10-15 00:46:55,781 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:55,781 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:55,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:55,832 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:55,832 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:55,832 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905613939] [2024-10-15 00:46:55,833 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905613939] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:55,833 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:55,833 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:55,834 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1848092613] [2024-10-15 00:46:55,834 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:55,834 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:55,834 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:55,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:55,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:55,835 INFO L87 Difference]: Start difference. First operand 16332 states and 30060 transitions. cyclomatic complexity: 13729 Second operand has 4 states, 4 states have (on average 14.5) internal successors, (58), 4 states have internal predecessors, (58), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:56,109 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:56,109 INFO L93 Difference]: Finished difference Result 16342 states and 30071 transitions. [2024-10-15 00:46:56,109 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16342 states and 30071 transitions. [2024-10-15 00:46:56,187 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:56,241 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16342 states to 16342 states and 30071 transitions. [2024-10-15 00:46:56,242 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16342 [2024-10-15 00:46:56,257 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16342 [2024-10-15 00:46:56,258 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16342 states and 30071 transitions. [2024-10-15 00:46:56,272 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:56,272 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16342 states and 30071 transitions. [2024-10-15 00:46:56,284 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16342 states and 30071 transitions. [2024-10-15 00:46:56,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16342 to 16332. [2024-10-15 00:46:56,467 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16332 states, 16332 states have (on average 1.840313494979182) internal successors, (30056), 16331 states have internal predecessors, (30056), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:56,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16332 states to 16332 states and 30056 transitions. [2024-10-15 00:46:56,500 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16332 states and 30056 transitions. [2024-10-15 00:46:56,501 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:56,501 INFO L425 stractBuchiCegarLoop]: Abstraction has 16332 states and 30056 transitions. [2024-10-15 00:46:56,501 INFO L332 stractBuchiCegarLoop]: ======== Iteration 15 ============ [2024-10-15 00:46:56,501 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16332 states and 30056 transitions. [2024-10-15 00:46:56,555 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:56,556 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:56,556 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:56,560 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:56,561 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:56,561 INFO L745 eck$LassoCheckResult]: Stem: 365619#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 365620#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 366827#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 366325#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 366326#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 365326#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 365327#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 365463#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 365464#L1810 assume !(0 == getOrigin_~person#1); 367554#L1814 assume !(1 == getOrigin_~person#1); 367646#L1818 assume !(2 == getOrigin_~person#1); 365651#L1822 assume !(3 == getOrigin_~person#1); 365652#L1826 assume !(4 == getOrigin_~person#1); 367694#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 365638#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 365639#L2239 assume !(0 == initPersonOnFloor_~floor#1); 365960#L2266 assume 1 == initPersonOnFloor_~floor#1; 365961#L2267 assume !(0 == initPersonOnFloor_~person#1); 366536#L2270 assume !(1 == initPersonOnFloor_~person#1); 366537#L2273 assume 2 == initPersonOnFloor_~person#1;~personOnFloor_2_1~0 := 1; 365329#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 366117#L2031 assume !(0 == callOnFloor_~floorID#1); 366025#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 366026#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 367741#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 367740#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 367739#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 367738#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 367737#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 366987#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 366950#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 366951#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 367720#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 367744#L1309 assume !(0 != timeShift_~tmp___9~2#1); 365684#L1400 assume !(1 == ~doorState~0); 365685#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 366595#L752 assume !(1 == stopRequestedInDirection_~dir#1); 366554#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 366555#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 366804#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 366805#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 367598#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 367743#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 366525#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 365680#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 367247#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 367248#L1128-2 assume !(1 == ~currentHeading~0); 366415#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 366416#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 365306#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 365307#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 367016#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 366616#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 366617#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 365465#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 365466#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 365789#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 365720#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 367026#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 367654#L3157-2 [2024-10-15 00:46:56,562 INFO L747 eck$LassoCheckResult]: Loop: 367654#L3157-2 assume !false; 380229#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 380228#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 380227#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 380226#L3165 assume 1 != cleanup_~tmp___0~9#1; 380225#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 380224#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 380223#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 380195#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 380194#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 380193#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 380192#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 380191#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 380188#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 380186#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 380177#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 380176#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 380175#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 380172#L1311-2 assume !(0 != ~persons_0~0); 380168#L1311-3 assume !(0 != ~persons_1~0); 380164#L1325-1 assume !(0 != ~persons_2~0); 380160#L1339-1 assume !(0 != ~persons_3~0); 377487#L1353-1 assume !(0 != ~persons_4~0); 377483#L1367-1 assume !(0 != ~persons_5~0); 377479#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377478#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 377453#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377442#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 377440#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 377438#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377436#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 377435#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377404#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 377402#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 377400#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377399#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 377381#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377363#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 377361#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 377359#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377358#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 377331#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377322#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 377320#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 377318#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377317#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 377312#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377286#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 377284#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 377282#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 377281#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 377261#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 377245#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 377166#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 377165#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 377164#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 374034#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 374032#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 374031#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 374024#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 365590#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 374023#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 374019#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 374020#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 380245#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 380246#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 380232#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 380231#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 380230#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 367654#L3157-2 [2024-10-15 00:46:56,562 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:56,562 INFO L85 PathProgramCache]: Analyzing trace with hash 339290751, now seen corresponding path program 1 times [2024-10-15 00:46:56,563 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:56,563 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [849115774] [2024-10-15 00:46:56,563 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:56,563 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:56,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:56,639 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:56,640 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:56,640 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [849115774] [2024-10-15 00:46:56,640 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [849115774] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:56,640 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:56,640 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:56,640 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [270747783] [2024-10-15 00:46:56,640 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:56,640 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:56,640 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:56,641 INFO L85 PathProgramCache]: Analyzing trace with hash -1039420419, now seen corresponding path program 3 times [2024-10-15 00:46:56,641 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:56,641 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1596903769] [2024-10-15 00:46:56,641 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:56,641 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:56,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:56,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:56,727 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:56,727 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1596903769] [2024-10-15 00:46:56,728 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1596903769] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:56,728 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:56,728 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:56,728 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1165361439] [2024-10-15 00:46:56,728 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:56,728 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:56,728 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:56,729 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:56,729 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:56,729 INFO L87 Difference]: Start difference. First operand 16332 states and 30056 transitions. cyclomatic complexity: 13725 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:56,979 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:56,979 INFO L93 Difference]: Finished difference Result 16342 states and 30067 transitions. [2024-10-15 00:46:56,979 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16342 states and 30067 transitions. [2024-10-15 00:46:57,033 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:57,069 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16342 states to 16342 states and 30067 transitions. [2024-10-15 00:46:57,069 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16342 [2024-10-15 00:46:57,080 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16342 [2024-10-15 00:46:57,080 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16342 states and 30067 transitions. [2024-10-15 00:46:57,090 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:57,091 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16342 states and 30067 transitions. [2024-10-15 00:46:57,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16342 states and 30067 transitions. [2024-10-15 00:46:57,199 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16342 to 16332. [2024-10-15 00:46:57,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16332 states, 16332 states have (on average 1.840068577026696) internal successors, (30052), 16331 states have internal predecessors, (30052), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:57,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16332 states to 16332 states and 30052 transitions. [2024-10-15 00:46:57,240 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16332 states and 30052 transitions. [2024-10-15 00:46:57,241 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:57,241 INFO L425 stractBuchiCegarLoop]: Abstraction has 16332 states and 30052 transitions. [2024-10-15 00:46:57,241 INFO L332 stractBuchiCegarLoop]: ======== Iteration 16 ============ [2024-10-15 00:46:57,241 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16332 states and 30052 transitions. [2024-10-15 00:46:57,287 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:57,287 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:57,287 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:57,293 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:57,293 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:57,294 INFO L745 eck$LassoCheckResult]: Stem: 398306#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 398307#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 399506#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 399005#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 399006#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 398012#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 398013#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 398152#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 398153#L1810 assume !(0 == getOrigin_~person#1); 400227#L1814 assume !(1 == getOrigin_~person#1); 400321#L1818 assume !(2 == getOrigin_~person#1); 398338#L1822 assume !(3 == getOrigin_~person#1); 398339#L1826 assume !(4 == getOrigin_~person#1); 400378#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 398325#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 398326#L2239 assume !(0 == initPersonOnFloor_~floor#1); 398643#L2266 assume !(1 == initPersonOnFloor_~floor#1); 398645#L2293 assume !(2 == initPersonOnFloor_~floor#1); 399913#L2320 assume !(3 == initPersonOnFloor_~floor#1); 400345#L2347 assume !(4 == initPersonOnFloor_~floor#1); 398015#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 398800#L2031 assume !(0 == callOnFloor_~floorID#1); 398708#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 398709#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 400433#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 400432#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 400431#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 400430#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 400429#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 399665#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 399627#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 399628#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 400407#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 400436#L1309 assume !(0 != timeShift_~tmp___9~2#1); 398371#L1400 assume !(1 == ~doorState~0); 398372#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 399275#L752 assume !(1 == stopRequestedInDirection_~dir#1); 399237#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 399238#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 399483#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 399484#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 400272#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 400435#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 399208#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 398367#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 399917#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 399918#L1128-2 assume !(1 == ~currentHeading~0); 399096#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 399097#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 397992#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 397993#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 405686#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 405685#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 405682#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 405673#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 405677#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 405670#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 405668#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 403480#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 403481#L3157-2 [2024-10-15 00:46:57,294 INFO L747 eck$LassoCheckResult]: Loop: 403481#L3157-2 assume !false; 409002#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 409001#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 409000#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 408999#L3165 assume 1 != cleanup_~tmp___0~9#1; 408998#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 408997#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 408996#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 408995#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 400119#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 413969#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 413968#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 402840#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 402832#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 402830#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 402829#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 402822#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 410596#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 402819#L1311-2 assume !(0 != ~persons_0~0); 410590#L1311-3 assume !(0 != ~persons_1~0); 410581#L1325-1 assume !(0 != ~persons_2~0); 410576#L1339-1 assume !(0 != ~persons_3~0); 410544#L1353-1 assume !(0 != ~persons_4~0); 410540#L1367-1 assume !(0 != ~persons_5~0); 410537#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 410535#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 410396#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 410384#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 410381#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 410382#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 410515#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 410510#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 410479#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 410477#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 410478#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 412804#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 407944#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 407925#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 407923#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 407921#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 407920#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 407885#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 407875#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 407873#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 407871#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 407870#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 407856#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 407826#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 407824#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 407822#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 407821#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 407801#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 407785#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 407784#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 403554#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 403552#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 403542#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 403540#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 403536#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 403519#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 403515#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 403513#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 403511#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 403512#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 409006#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 409011#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 409009#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 409004#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 409003#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 403481#L3157-2 [2024-10-15 00:46:57,295 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:57,295 INFO L85 PathProgramCache]: Analyzing trace with hash 962469375, now seen corresponding path program 1 times [2024-10-15 00:46:57,295 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:57,296 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1142498556] [2024-10-15 00:46:57,296 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:57,296 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:57,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:57,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:57,356 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:57,356 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1142498556] [2024-10-15 00:46:57,356 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1142498556] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:57,356 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:57,356 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:57,357 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1022530231] [2024-10-15 00:46:57,357 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:57,357 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:57,357 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:57,357 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 3 times [2024-10-15 00:46:57,357 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:57,357 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1376623775] [2024-10-15 00:46:57,358 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:57,358 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:57,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:57,444 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:57,444 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:57,445 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1376623775] [2024-10-15 00:46:57,445 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1376623775] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:57,445 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:57,445 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:57,445 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [281125164] [2024-10-15 00:46:57,445 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:57,445 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:57,445 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:57,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:57,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:57,446 INFO L87 Difference]: Start difference. First operand 16332 states and 30052 transitions. cyclomatic complexity: 13721 Second operand has 4 states, 4 states have (on average 14.75) internal successors, (59), 4 states have internal predecessors, (59), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:57,515 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:57,516 INFO L93 Difference]: Finished difference Result 16311 states and 30018 transitions. [2024-10-15 00:46:57,516 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16311 states and 30018 transitions. [2024-10-15 00:46:57,759 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:57,804 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16311 states to 16311 states and 30018 transitions. [2024-10-15 00:46:57,805 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16311 [2024-10-15 00:46:57,819 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16311 [2024-10-15 00:46:57,820 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16311 states and 30018 transitions. [2024-10-15 00:46:57,832 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:57,832 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30018 transitions. [2024-10-15 00:46:57,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16311 states and 30018 transitions. [2024-10-15 00:46:57,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16311 to 16311. [2024-10-15 00:46:57,966 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16311 states, 16311 states have (on average 1.8403531359205445) internal successors, (30018), 16310 states have internal predecessors, (30018), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:57,992 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16311 states to 16311 states and 30018 transitions. [2024-10-15 00:46:57,992 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30018 transitions. [2024-10-15 00:46:57,992 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:57,993 INFO L425 stractBuchiCegarLoop]: Abstraction has 16311 states and 30018 transitions. [2024-10-15 00:46:57,993 INFO L332 stractBuchiCegarLoop]: ======== Iteration 17 ============ [2024-10-15 00:46:57,993 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16311 states and 30018 transitions. [2024-10-15 00:46:58,037 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:58,037 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:58,037 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:58,042 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:58,042 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:58,043 INFO L745 eck$LassoCheckResult]: Stem: 430956#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 430957#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 432162#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 431655#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 431656#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 430668#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 430669#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 430804#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 430805#L1810 assume !(0 == getOrigin_~person#1); 432901#L1814 assume !(1 == getOrigin_~person#1); 432990#L1818 assume !(2 == getOrigin_~person#1); 430988#L1822 assume !(3 == getOrigin_~person#1); 430989#L1826 assume !(4 == getOrigin_~person#1); 433031#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 430975#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 430976#L2239 assume !(0 == initPersonOnFloor_~floor#1); 431290#L2266 assume 1 == initPersonOnFloor_~floor#1; 431291#L2267 assume !(0 == initPersonOnFloor_~person#1); 431868#L2270 assume !(1 == initPersonOnFloor_~person#1); 431869#L2273 assume !(2 == initPersonOnFloor_~person#1); 430723#L2276 assume 3 == initPersonOnFloor_~person#1;~personOnFloor_3_1~0 := 1; 430724#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 431450#L2031 assume !(0 == callOnFloor_~floorID#1); 431357#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 431358#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 433088#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 433087#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 433086#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 433085#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 433084#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 432324#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 432284#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 432285#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 433058#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 433091#L1309 assume !(0 != timeShift_~tmp___9~2#1); 431021#L1400 assume !(1 == ~doorState~0); 431022#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 431930#L752 assume !(1 == stopRequestedInDirection_~dir#1); 431887#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 431888#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 432139#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 432140#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 432944#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 433090#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 431857#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 431017#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 432587#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 432588#L1128-2 assume !(1 == ~currentHeading~0); 431747#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 431748#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 430648#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 430649#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 433208#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 433207#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 433206#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 433195#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 433199#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 433192#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 433190#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 433187#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 433188#L3157-2 [2024-10-15 00:46:58,043 INFO L747 eck$LassoCheckResult]: Loop: 433188#L3157-2 assume !false; 438684#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 438682#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 438680#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 438678#L3165 assume 1 != cleanup_~tmp___0~9#1; 438676#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 438674#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 438672#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 438669#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 438670#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 445139#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 445138#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 445137#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 445120#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 445118#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 445117#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 433021#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 433022#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 442145#L1311-2 assume !(0 != ~persons_0~0); 442140#L1311-3 assume !(0 != ~persons_1~0); 440154#L1325-1 assume !(0 != ~persons_2~0); 440148#L1339-1 assume !(0 != ~persons_3~0); 440143#L1353-1 assume !(0 != ~persons_4~0); 439190#L1367-1 assume !(0 != ~persons_5~0); 438038#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 438037#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 438012#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 438001#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 437994#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 437992#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 437985#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 437963#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 437931#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 437929#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 437927#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 437926#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 437902#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 437883#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 437881#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 437879#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 437878#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 437847#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 437837#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 437835#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 437827#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 437825#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 437813#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 437783#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 437781#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 437779#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 437778#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 437606#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 437590#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 436899#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 436897#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 436711#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 436704#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 436662#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 436628#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 436613#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 436610#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 436609#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 436607#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 436608#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 438700#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 438705#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 438703#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 438689#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 438687#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 433188#L3157-2 [2024-10-15 00:46:58,043 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:58,044 INFO L85 PathProgramCache]: Analyzing trace with hash -1984176129, now seen corresponding path program 1 times [2024-10-15 00:46:58,044 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:58,044 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1753246790] [2024-10-15 00:46:58,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:58,044 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:58,059 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:58,098 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:58,098 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:58,098 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1753246790] [2024-10-15 00:46:58,098 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1753246790] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:58,098 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:58,098 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:58,098 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [730887959] [2024-10-15 00:46:58,098 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:58,099 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:58,099 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:58,099 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 4 times [2024-10-15 00:46:58,099 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:58,099 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [824528340] [2024-10-15 00:46:58,099 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:58,099 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:58,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:58,144 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:58,145 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:58,145 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [824528340] [2024-10-15 00:46:58,145 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [824528340] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:58,145 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:58,145 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:46:58,145 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221922415] [2024-10-15 00:46:58,145 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:58,146 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:58,146 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:58,146 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:58,146 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:58,146 INFO L87 Difference]: Start difference. First operand 16311 states and 30018 transitions. cyclomatic complexity: 13708 Second operand has 4 states, 4 states have (on average 15.0) internal successors, (60), 4 states have internal predecessors, (60), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:58,222 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:58,222 INFO L93 Difference]: Finished difference Result 16311 states and 30017 transitions. [2024-10-15 00:46:58,222 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16311 states and 30017 transitions. [2024-10-15 00:46:58,283 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:58,326 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16311 states to 16311 states and 30017 transitions. [2024-10-15 00:46:58,326 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16311 [2024-10-15 00:46:58,339 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16311 [2024-10-15 00:46:58,340 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16311 states and 30017 transitions. [2024-10-15 00:46:58,351 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:58,351 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30017 transitions. [2024-10-15 00:46:58,360 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16311 states and 30017 transitions. [2024-10-15 00:46:58,630 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16311 to 16311. [2024-10-15 00:46:58,645 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16311 states, 16311 states have (on average 1.8402918276010054) internal successors, (30017), 16310 states have internal predecessors, (30017), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:58,670 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16311 states to 16311 states and 30017 transitions. [2024-10-15 00:46:58,670 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30017 transitions. [2024-10-15 00:46:58,671 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:58,671 INFO L425 stractBuchiCegarLoop]: Abstraction has 16311 states and 30017 transitions. [2024-10-15 00:46:58,671 INFO L332 stractBuchiCegarLoop]: ======== Iteration 18 ============ [2024-10-15 00:46:58,671 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16311 states and 30017 transitions. [2024-10-15 00:46:58,719 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:58,719 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:58,719 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:58,724 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:58,724 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:58,724 INFO L745 eck$LassoCheckResult]: Stem: 463584#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 463585#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 464769#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 464276#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 464277#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 463300#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 463301#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 463432#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 463433#L1810 assume !(0 == getOrigin_~person#1); 465465#L1814 assume !(1 == getOrigin_~person#1); 465543#L1818 assume !(2 == getOrigin_~person#1); 463616#L1822 assume !(3 == getOrigin_~person#1); 463617#L1826 assume !(4 == getOrigin_~person#1); 465582#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 463603#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 463604#L2239 assume !(0 == initPersonOnFloor_~floor#1); 463918#L2266 assume 1 == initPersonOnFloor_~floor#1; 463919#L2267 assume !(0 == initPersonOnFloor_~person#1); 464482#L2270 assume !(1 == initPersonOnFloor_~person#1); 464483#L2273 assume !(2 == initPersonOnFloor_~person#1); 463355#L2276 assume !(3 == initPersonOnFloor_~person#1); 463356#L2279 assume 4 == initPersonOnFloor_~person#1;~personOnFloor_4_1~0 := 1; 464074#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 464075#L2031 assume !(0 == callOnFloor_~floorID#1); 463982#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 463983#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 465621#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 465620#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 465619#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 465618#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 465617#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 464921#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 464885#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 464886#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 465601#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 465624#L1309 assume !(0 != timeShift_~tmp___9~2#1); 463649#L1400 assume !(1 == ~doorState~0); 463650#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 464541#L752 assume !(1 == stopRequestedInDirection_~dir#1); 464501#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 464502#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 464746#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 464747#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 465502#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 465623#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 464471#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 463645#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 465166#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 465167#L1128-2 assume !(1 == ~currentHeading~0); 464365#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 464366#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 463280#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 463281#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 465745#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 465744#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 465743#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 465732#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 465736#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 465729#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 465727#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 465724#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 465725#L3157-2 [2024-10-15 00:46:58,725 INFO L747 eck$LassoCheckResult]: Loop: 465725#L3157-2 assume !false; 471214#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 471212#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 471210#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 471208#L3165 assume 1 != cleanup_~tmp___0~9#1; 471206#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 471204#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 471202#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 471199#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 471200#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 479235#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 465486#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 464878#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 464706#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 463488#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 476958#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 474832#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 474685#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 474682#L1311-2 assume !(0 != ~persons_0~0); 474677#L1311-3 assume !(0 != ~persons_1~0); 472689#L1325-1 assume !(0 != ~persons_2~0); 472683#L1339-1 assume !(0 != ~persons_3~0); 472678#L1353-1 assume !(0 != ~persons_4~0); 471726#L1367-1 assume !(0 != ~persons_5~0); 470574#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470573#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 470548#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470537#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 470530#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 470528#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470521#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 470499#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470467#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 470465#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 470463#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470462#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 470438#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470419#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 470417#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 470415#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470414#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 470383#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470373#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 470371#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 470363#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470361#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 470349#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470319#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 470317#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 470315#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 470314#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 470142#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 470126#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 469435#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 469433#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 469247#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 469240#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 469198#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 469164#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 469149#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 469146#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 469145#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 469143#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 469144#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 471230#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 471235#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 471233#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 471219#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 471217#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 465725#L3157-2 [2024-10-15 00:46:58,726 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:58,726 INFO L85 PathProgramCache]: Analyzing trace with hash 2015727322, now seen corresponding path program 1 times [2024-10-15 00:46:58,726 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:58,726 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1029323059] [2024-10-15 00:46:58,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:58,729 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:58,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:58,789 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:58,789 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:58,789 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1029323059] [2024-10-15 00:46:58,789 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1029323059] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:58,789 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:58,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:46:58,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1726773131] [2024-10-15 00:46:58,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:58,790 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:58,790 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:58,790 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 5 times [2024-10-15 00:46:58,790 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:58,790 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1609254238] [2024-10-15 00:46:58,791 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:58,791 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:58,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:58,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:58,848 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:58,848 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1609254238] [2024-10-15 00:46:58,848 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1609254238] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:58,848 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:58,848 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:58,848 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1309605523] [2024-10-15 00:46:58,849 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:58,849 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:58,849 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:58,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:46:58,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:46:58,850 INFO L87 Difference]: Start difference. First operand 16311 states and 30017 transitions. cyclomatic complexity: 13707 Second operand has 4 states, 4 states have (on average 15.25) internal successors, (61), 4 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:58,925 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:58,925 INFO L93 Difference]: Finished difference Result 16311 states and 30016 transitions. [2024-10-15 00:46:58,925 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16311 states and 30016 transitions. [2024-10-15 00:46:58,985 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:59,034 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16311 states to 16311 states and 30016 transitions. [2024-10-15 00:46:59,035 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16311 [2024-10-15 00:46:59,049 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16311 [2024-10-15 00:46:59,049 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16311 states and 30016 transitions. [2024-10-15 00:46:59,060 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:46:59,061 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30016 transitions. [2024-10-15 00:46:59,071 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16311 states and 30016 transitions. [2024-10-15 00:46:59,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16311 to 16311. [2024-10-15 00:46:59,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16311 states, 16311 states have (on average 1.8402305192814665) internal successors, (30016), 16310 states have internal predecessors, (30016), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:59,504 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16311 states to 16311 states and 30016 transitions. [2024-10-15 00:46:59,504 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30016 transitions. [2024-10-15 00:46:59,504 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:46:59,505 INFO L425 stractBuchiCegarLoop]: Abstraction has 16311 states and 30016 transitions. [2024-10-15 00:46:59,505 INFO L332 stractBuchiCegarLoop]: ======== Iteration 19 ============ [2024-10-15 00:46:59,505 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16311 states and 30016 transitions. [2024-10-15 00:46:59,567 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:46:59,568 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:46:59,568 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:46:59,573 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:59,573 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:46:59,574 INFO L745 eck$LassoCheckResult]: Stem: 496220#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 496221#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 497416#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 496918#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 496919#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 495934#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 495935#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 496066#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 496067#L1810 assume !(0 == getOrigin_~person#1); 498132#L1814 assume !(1 == getOrigin_~person#1); 498222#L1818 assume !(2 == getOrigin_~person#1); 496252#L1822 assume !(3 == getOrigin_~person#1); 496253#L1826 assume !(4 == getOrigin_~person#1); 498267#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 496239#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 496240#L2239 assume !(0 == initPersonOnFloor_~floor#1); 496557#L2266 assume 1 == initPersonOnFloor_~floor#1; 496558#L2267 assume !(0 == initPersonOnFloor_~person#1); 497125#L2270 assume !(1 == initPersonOnFloor_~person#1); 497126#L2273 assume !(2 == initPersonOnFloor_~person#1); 495989#L2276 assume !(3 == initPersonOnFloor_~person#1); 495990#L2279 assume !(4 == initPersonOnFloor_~person#1); 497099#L2282 assume !(5 == initPersonOnFloor_~person#1); 496713#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 496714#L2031 assume !(0 == callOnFloor_~floorID#1); 496621#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 496622#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 498315#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 498314#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 498313#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 498312#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 498311#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 497572#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 497535#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 497536#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 498291#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 498318#L1309 assume !(0 != timeShift_~tmp___9~2#1); 496285#L1400 assume !(1 == ~doorState~0); 496286#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 497184#L752 assume !(1 == stopRequestedInDirection_~dir#1); 497144#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 497145#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 497392#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 497393#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 498173#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 498317#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 497114#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 496281#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 497822#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 497823#L1128-2 assume !(1 == ~currentHeading~0); 497005#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 497006#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 495914#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 495915#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 498451#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 498450#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 498449#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 498438#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 498442#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 498435#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 498433#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 498431#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 498430#L3157-2 [2024-10-15 00:46:59,575 INFO L747 eck$LassoCheckResult]: Loop: 498430#L3157-2 assume !false; 498429#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 498428#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 498427#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 498426#L3165 assume 1 != cleanup_~tmp___0~9#1; 498421#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 498420#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 498419#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 498417#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 498418#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 510435#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 509517#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 507827#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 506890#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 506884#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 506879#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 506878#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 504061#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 504058#L1311-2 assume !(0 != ~persons_0~0); 504054#L1311-3 assume !(0 != ~persons_1~0); 504045#L1325-1 assume !(0 != ~persons_2~0); 504040#L1339-1 assume !(0 != ~persons_3~0); 504008#L1353-1 assume !(0 != ~persons_4~0); 504004#L1367-1 assume !(0 != ~persons_5~0); 504001#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 504000#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 503891#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 503879#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 503877#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 503875#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 503873#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 503859#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 503827#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 503825#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 503823#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 503822#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 503804#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 503786#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 503780#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 503781#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 504660#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 504633#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 503340#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 503338#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 503339#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 502753#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 502747#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 502718#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 502714#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 502712#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 502711#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 502527#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 502509#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 502504#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 502505#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 502173#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 502163#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 502158#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 502151#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 502136#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 502133#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 502132#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 502131#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 502124#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 498454#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 498459#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 498457#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 498452#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 498432#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 498430#L3157-2 [2024-10-15 00:46:59,575 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:59,576 INFO L85 PathProgramCache]: Analyzing trace with hash -1195159176, now seen corresponding path program 1 times [2024-10-15 00:46:59,576 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:59,576 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396149206] [2024-10-15 00:46:59,576 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:59,576 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:59,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:59,646 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:59,646 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:59,646 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396149206] [2024-10-15 00:46:59,650 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1396149206] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:59,650 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:59,650 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:46:59,650 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [48784396] [2024-10-15 00:46:59,651 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:59,651 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:46:59,651 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:46:59,651 INFO L85 PathProgramCache]: Analyzing trace with hash -549293121, now seen corresponding path program 6 times [2024-10-15 00:46:59,651 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:46:59,651 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1774479420] [2024-10-15 00:46:59,651 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:46:59,651 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:46:59,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:46:59,770 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:46:59,770 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:46:59,770 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1774479420] [2024-10-15 00:46:59,770 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1774479420] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:46:59,770 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:46:59,771 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:46:59,771 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1530730435] [2024-10-15 00:46:59,771 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:46:59,771 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:46:59,771 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:46:59,772 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-15 00:46:59,772 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-15 00:46:59,772 INFO L87 Difference]: Start difference. First operand 16311 states and 30016 transitions. cyclomatic complexity: 13706 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:46:59,858 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:46:59,859 INFO L93 Difference]: Finished difference Result 16311 states and 30015 transitions. [2024-10-15 00:46:59,859 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16311 states and 30015 transitions. [2024-10-15 00:46:59,946 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:47:00,009 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16311 states to 16311 states and 30015 transitions. [2024-10-15 00:47:00,009 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16311 [2024-10-15 00:47:00,029 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16311 [2024-10-15 00:47:00,029 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16311 states and 30015 transitions. [2024-10-15 00:47:00,046 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:00,046 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30015 transitions. [2024-10-15 00:47:00,058 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16311 states and 30015 transitions. [2024-10-15 00:47:00,227 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16311 to 16311. [2024-10-15 00:47:00,242 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16311 states, 16311 states have (on average 1.8401692109619274) internal successors, (30015), 16310 states have internal predecessors, (30015), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:00,275 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16311 states to 16311 states and 30015 transitions. [2024-10-15 00:47:00,275 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16311 states and 30015 transitions. [2024-10-15 00:47:00,276 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-15 00:47:00,276 INFO L425 stractBuchiCegarLoop]: Abstraction has 16311 states and 30015 transitions. [2024-10-15 00:47:00,276 INFO L332 stractBuchiCegarLoop]: ======== Iteration 20 ============ [2024-10-15 00:47:00,276 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16311 states and 30015 transitions. [2024-10-15 00:47:00,332 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12968 [2024-10-15 00:47:00,332 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:00,332 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:00,337 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:00,337 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:00,337 INFO L745 eck$LassoCheckResult]: Stem: 528851#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 528852#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 530042#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 529550#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 529551#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 528567#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 528568#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 528698#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 528699#L1810 assume !(0 == getOrigin_~person#1); 530740#L1814 assume !(1 == getOrigin_~person#1); 530828#L1818 assume !(2 == getOrigin_~person#1); 528883#L1822 assume !(3 == getOrigin_~person#1); 528884#L1826 assume !(4 == getOrigin_~person#1); 530872#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 528870#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 528871#L2239 assume !(0 == initPersonOnFloor_~floor#1); 529190#L2266 assume 1 == initPersonOnFloor_~floor#1; 529191#L2267 assume !(0 == initPersonOnFloor_~person#1); 529757#L2270 assume !(1 == initPersonOnFloor_~person#1); 529758#L2273 assume !(2 == initPersonOnFloor_~person#1); 528621#L2276 assume !(3 == initPersonOnFloor_~person#1); 528622#L2279 assume !(4 == initPersonOnFloor_~person#1); 529731#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 529347#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 529348#L2031 assume !(0 == callOnFloor_~floorID#1); 529255#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 529256#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 530922#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 530921#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 530920#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 530919#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 530918#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 530194#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 530158#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 530159#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 530897#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 530925#L1309 assume !(0 != timeShift_~tmp___9~2#1); 528916#L1400 assume !(1 == ~doorState~0); 528917#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 529815#L752 assume !(1 == stopRequestedInDirection_~dir#1); 529775#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 529776#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 530019#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 530020#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 530782#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 530924#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 529746#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 528912#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 530441#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 530442#L1128-2 assume !(1 == ~currentHeading~0); 529640#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 529641#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 528547#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 528548#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 531044#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 531043#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 531042#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 531031#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 531035#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 531028#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 531026#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 531023#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 531024#L3157-2 [2024-10-15 00:47:00,338 INFO L747 eck$LassoCheckResult]: Loop: 531024#L3157-2 assume !false; 536514#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 536512#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 536510#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 536508#L3165 assume 1 != cleanup_~tmp___0~9#1; 536506#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 536504#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 536502#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 536499#L656 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 536500#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 541427#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 541404#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 541401#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 541396#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 541393#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 541391#L1161-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~3#1;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 530860#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 530625#L1309-2 assume 0 != timeShift_~tmp___9~2#1;~doorState~0 := 1; 530352#L1311-2 assume !(0 != ~persons_0~0); 528958#L1311-3 assume !(0 != ~persons_1~0); 537989#L1325-1 assume !(0 != ~persons_2~0); 537983#L1339-1 assume !(0 != ~persons_3~0); 537978#L1353-1 assume !(0 != ~persons_4~0); 537026#L1367-1 assume !(0 != ~persons_5~0); 535872#L1381-1 assume { :begin_inline_processWaitingOnFloor } true;processWaitingOnFloor_#in~floorID#1 := ~currentFloorID~0;havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;processWaitingOnFloor_~floorID#1 := processWaitingOnFloor_#in~floorID#1;havoc processWaitingOnFloor_~tmp~9#1;havoc processWaitingOnFloor_~tmp___0~4#1;havoc processWaitingOnFloor_~tmp___1~3#1;havoc processWaitingOnFloor_~tmp___2~3#1;havoc processWaitingOnFloor_~tmp___3~3#1;havoc processWaitingOnFloor_~tmp___4~2#1;havoc processWaitingOnFloor_~tmp___5~1#1;havoc processWaitingOnFloor_~tmp___6~1#1;havoc processWaitingOnFloor_~tmp___7~1#1;havoc processWaitingOnFloor_~tmp___8~1#1;havoc processWaitingOnFloor_~tmp___9~1#1;havoc processWaitingOnFloor_~tmp___10~0#1;assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 0, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535871#L2059-12 assume 0 == isPersonOnFloor_~floor#1; 535846#L2060-6 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535835#isPersonOnFloor_returnLabel#7 processWaitingOnFloor_#t~ret34#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___0~4#1 := processWaitingOnFloor_#t~ret34#1;havoc processWaitingOnFloor_#t~ret34#1; 535828#L1211-3 assume !(0 != processWaitingOnFloor_~tmp___0~4#1); 535826#L1211-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 1, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535819#L2059-14 assume 0 == isPersonOnFloor_~floor#1; 535797#L2060-7 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535765#isPersonOnFloor_returnLabel#8 processWaitingOnFloor_#t~ret36#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___2~3#1 := processWaitingOnFloor_#t~ret36#1;havoc processWaitingOnFloor_#t~ret36#1; 535763#L1224-3 assume !(0 != processWaitingOnFloor_~tmp___2~3#1); 535761#L1224-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 2, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535760#L2059-16 assume 0 == isPersonOnFloor_~floor#1; 535736#L2060-8 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535717#isPersonOnFloor_returnLabel#9 processWaitingOnFloor_#t~ret38#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___4~2#1 := processWaitingOnFloor_#t~ret38#1;havoc processWaitingOnFloor_#t~ret38#1; 535715#L1237-3 assume !(0 != processWaitingOnFloor_~tmp___4~2#1); 535713#L1237-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 3, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535712#L2059-18 assume 0 == isPersonOnFloor_~floor#1; 535681#L2060-9 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535671#isPersonOnFloor_returnLabel#10 processWaitingOnFloor_#t~ret40#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___6~1#1 := processWaitingOnFloor_#t~ret40#1;havoc processWaitingOnFloor_#t~ret40#1; 535669#L1250-3 assume !(0 != processWaitingOnFloor_~tmp___6~1#1); 535661#L1250-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 4, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535659#L2059-20 assume 0 == isPersonOnFloor_~floor#1; 535647#L2060-10 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535617#isPersonOnFloor_returnLabel#11 processWaitingOnFloor_#t~ret42#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___8~1#1 := processWaitingOnFloor_#t~ret42#1;havoc processWaitingOnFloor_#t~ret42#1; 535615#L1263-3 assume !(0 != processWaitingOnFloor_~tmp___8~1#1); 535613#L1263-5 assume { :begin_inline_isPersonOnFloor } true;isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1 := 5, processWaitingOnFloor_~floorID#1;havoc isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;isPersonOnFloor_~person#1 := isPersonOnFloor_#in~person#1;isPersonOnFloor_~floor#1 := isPersonOnFloor_#in~floor#1;havoc isPersonOnFloor_~retValue_acc~19#1; 535612#L2059-22 assume 0 == isPersonOnFloor_~floor#1; 535440#L2060-11 assume 0 == isPersonOnFloor_~person#1;isPersonOnFloor_~retValue_acc~19#1 := ~personOnFloor_0_0~0;isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~19#1; 535424#isPersonOnFloor_returnLabel#12 processWaitingOnFloor_#t~ret44#1 := isPersonOnFloor_#res#1;havoc isPersonOnFloor_~person#1, isPersonOnFloor_~floor#1, isPersonOnFloor_~retValue_acc~19#1;havoc isPersonOnFloor_#in~person#1, isPersonOnFloor_#in~floor#1;assume { :end_inline_isPersonOnFloor } true;processWaitingOnFloor_~tmp___10~0#1 := processWaitingOnFloor_#t~ret44#1;havoc processWaitingOnFloor_#t~ret44#1; 534733#L1276-3 assume !(0 != processWaitingOnFloor_~tmp___10~0#1); 534731#L1276-5 assume { :begin_inline_resetCallOnFloor } true;resetCallOnFloor_#in~floorID#1 := processWaitingOnFloor_~floorID#1;havoc resetCallOnFloor_~floorID#1;resetCallOnFloor_~floorID#1 := resetCallOnFloor_#in~floorID#1; 534545#L2003-26 assume 0 == resetCallOnFloor_~floorID#1;~calls_0~0 := 0; 534538#L2015-41 havoc resetCallOnFloor_~floorID#1;havoc resetCallOnFloor_#in~floorID#1;assume { :end_inline_resetCallOnFloor } true; 534496#processWaitingOnFloor_returnLabel#2 havoc processWaitingOnFloor_#t~ret34#1, processWaitingOnFloor_#t~ret35#1, processWaitingOnFloor_#t~ret36#1, processWaitingOnFloor_#t~ret37#1, processWaitingOnFloor_#t~ret38#1, processWaitingOnFloor_#t~ret39#1, processWaitingOnFloor_#t~ret40#1, processWaitingOnFloor_#t~ret41#1, processWaitingOnFloor_#t~ret42#1, processWaitingOnFloor_#t~ret43#1, processWaitingOnFloor_#t~ret44#1, processWaitingOnFloor_#t~ret45#1, processWaitingOnFloor_~floorID#1, processWaitingOnFloor_~tmp~9#1, processWaitingOnFloor_~tmp___0~4#1, processWaitingOnFloor_~tmp___1~3#1, processWaitingOnFloor_~tmp___2~3#1, processWaitingOnFloor_~tmp___3~3#1, processWaitingOnFloor_~tmp___4~2#1, processWaitingOnFloor_~tmp___5~1#1, processWaitingOnFloor_~tmp___6~1#1, processWaitingOnFloor_~tmp___7~1#1, processWaitingOnFloor_~tmp___8~1#1, processWaitingOnFloor_~tmp___9~1#1, processWaitingOnFloor_~tmp___10~0#1;havoc processWaitingOnFloor_#in~floorID#1;assume { :end_inline_processWaitingOnFloor } true;assume { :begin_inline_resetFloorButton } true;resetFloorButton_#in~floorID#1 := ~currentFloorID~0;havoc resetFloorButton_~floorID#1;resetFloorButton_~floorID#1 := resetFloorButton_#in~floorID#1; 534462#L519-2 assume 0 == resetFloorButton_~floorID#1;~floorButtons_0~0 := 0; 534447#L531-5 havoc resetFloorButton_~floorID#1;havoc resetFloorButton_#in~floorID#1;assume { :end_inline_resetFloorButton } true; 534444#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 534443#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 534441#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 534442#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 536542#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 536543#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 536529#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 536519#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 536517#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 531024#L3157-2 [2024-10-15 00:47:00,339 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:00,339 INFO L85 PathProgramCache]: Analyzing trace with hash 176648122, now seen corresponding path program 1 times [2024-10-15 00:47:00,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:00,339 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [506626428] [2024-10-15 00:47:00,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:00,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:00,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:00,391 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:00,391 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:00,391 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [506626428] [2024-10-15 00:47:00,392 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [506626428] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:00,392 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:00,392 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2024-10-15 00:47:00,392 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [24752597] [2024-10-15 00:47:00,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:00,393 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:00,393 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:00,393 INFO L85 PathProgramCache]: Analyzing trace with hash -1039420419, now seen corresponding path program 4 times [2024-10-15 00:47:00,393 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:00,393 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2044765934] [2024-10-15 00:47:00,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:00,394 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:00,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:00,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:00,481 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:00,481 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2044765934] [2024-10-15 00:47:00,481 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2044765934] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:00,481 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:00,481 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:00,482 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [210395676] [2024-10-15 00:47:00,482 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:00,482 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:00,482 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:00,482 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-15 00:47:00,482 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-15 00:47:00,483 INFO L87 Difference]: Start difference. First operand 16311 states and 30015 transitions. cyclomatic complexity: 13705 Second operand has 3 states, 3 states have (on average 20.666666666666668) internal successors, (62), 2 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:00,678 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:00,679 INFO L93 Difference]: Finished difference Result 16534 states and 30356 transitions. [2024-10-15 00:47:00,679 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16534 states and 30356 transitions. [2024-10-15 00:47:00,732 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13191 [2024-10-15 00:47:00,768 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16534 states to 16534 states and 30356 transitions. [2024-10-15 00:47:00,768 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16534 [2024-10-15 00:47:00,779 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16534 [2024-10-15 00:47:00,779 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16534 states and 30356 transitions. [2024-10-15 00:47:00,791 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:00,791 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16534 states and 30356 transitions. [2024-10-15 00:47:00,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16534 states and 30356 transitions. [2024-10-15 00:47:00,892 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16534 to 16503. [2024-10-15 00:47:00,906 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16503 states, 16503 states have (on average 1.837484093801127) internal successors, (30324), 16502 states have internal predecessors, (30324), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:00,930 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16503 states to 16503 states and 30324 transitions. [2024-10-15 00:47:00,930 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16503 states and 30324 transitions. [2024-10-15 00:47:00,930 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-15 00:47:00,931 INFO L425 stractBuchiCegarLoop]: Abstraction has 16503 states and 30324 transitions. [2024-10-15 00:47:00,931 INFO L332 stractBuchiCegarLoop]: ======== Iteration 21 ============ [2024-10-15 00:47:00,931 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16503 states and 30324 transitions. [2024-10-15 00:47:00,972 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13160 [2024-10-15 00:47:00,972 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:00,972 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:00,976 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:00,976 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:00,976 INFO L745 eck$LassoCheckResult]: Stem: 561709#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 561710#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 562913#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 562411#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 562412#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 561423#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 561424#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 561556#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 561557#L1810 assume !(0 == getOrigin_~person#1); 563647#L1814 assume !(1 == getOrigin_~person#1); 563737#L1818 assume !(2 == getOrigin_~person#1); 561741#L1822 assume !(3 == getOrigin_~person#1); 561742#L1826 assume !(4 == getOrigin_~person#1); 563792#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 561728#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 561729#L2239 assume !(0 == initPersonOnFloor_~floor#1); 562048#L2266 assume 1 == initPersonOnFloor_~floor#1; 562049#L2267 assume !(0 == initPersonOnFloor_~person#1); 562618#L2270 assume !(1 == initPersonOnFloor_~person#1); 562619#L2273 assume !(2 == initPersonOnFloor_~person#1); 561478#L2276 assume !(3 == initPersonOnFloor_~person#1); 561479#L2279 assume !(4 == initPersonOnFloor_~person#1); 562592#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 562207#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 562208#L2031 assume !(0 == callOnFloor_~floorID#1); 562113#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 562114#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 563852#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 563851#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 563850#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 563849#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 563848#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 563072#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 563035#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 563036#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 563818#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 563855#L1309 assume !(0 != timeShift_~tmp___9~2#1); 561774#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 561775#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 562678#L752 assume !(1 == stopRequestedInDirection_~dir#1); 562636#L921 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 562637#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 562890#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 562891#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 563691#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 563854#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 562607#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 561770#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 563332#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 563333#L1128-2 assume !(1 == ~currentHeading~0); 562498#L1138-6 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 562499#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 561403#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 561404#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 564312#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 564311#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 564310#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 564299#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 564303#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 564296#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 564294#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 564292#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 564291#L3157-2 [2024-10-15 00:47:00,977 INFO L747 eck$LassoCheckResult]: Loop: 564291#L3157-2 assume !false; 564290#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 564289#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 564288#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 564287#L3165 assume 1 != cleanup_~tmp___0~9#1; 564286#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 564285#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 564283#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 564284#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 564703#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 564704#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 569779#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 569776#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 568917#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 568517#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 568516#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 568515#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 565474#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 565470#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 565468#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 563901#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 563902#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 563896#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 563895#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 563889#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 563891#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 563886#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 563869#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 563868#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 564193#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 564191#L921-2 assume !(0 == ~currentFloorID~0); 564187#L927-2 assume ~currentFloorID~0 > 0; 564186#L928-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 563748#L1968-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 563749#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1; 564014#L932-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 564010#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 564006#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 564002#L1128-3 assume !(1 == ~currentHeading~0); 563996#L1138-9 assume !(0 == ~currentFloorID~0); 563991#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 563988#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 563986#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 563985#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 563984#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 563983#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 563980#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 563973#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 563964#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 563963#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 563962#L3157-2 assume !false; 563961#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 563960#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 563959#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 563958#L3165 assume 1 != cleanup_~tmp___0~9#1; 563957#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 563956#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 563955#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 563953#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 563951#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 563950#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 563948#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 563933#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 563929#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 563918#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 563917#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 563916#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 563914#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 563913#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 563912#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 563911#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 563910#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 563908#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 563907#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 563905#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 563904#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 562558#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 563464#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 563387#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 562774#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 563812#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 563649#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 563651#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 564620#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 563452#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 561892#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 568643#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 568642#L1128-5 assume !(1 == ~currentHeading~0); 568638#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 568637#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 568636#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 568633#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 565678#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 564589#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 564590#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 564315#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 564320#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 564318#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 564313#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 564293#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 564291#L3157-2 [2024-10-15 00:47:00,977 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:00,977 INFO L85 PathProgramCache]: Analyzing trace with hash 36099512, now seen corresponding path program 1 times [2024-10-15 00:47:00,977 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:00,977 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [26090033] [2024-10-15 00:47:00,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:00,977 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:00,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:01,035 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:01,035 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:01,035 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [26090033] [2024-10-15 00:47:01,035 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [26090033] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:01,035 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:01,035 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:47:01,035 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2066206562] [2024-10-15 00:47:01,036 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:01,036 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:01,036 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:01,036 INFO L85 PathProgramCache]: Analyzing trace with hash -1732579942, now seen corresponding path program 1 times [2024-10-15 00:47:01,036 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:01,036 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [263503207] [2024-10-15 00:47:01,036 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:01,036 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:01,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:01,104 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-10-15 00:47:01,104 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:01,104 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [263503207] [2024-10-15 00:47:01,104 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [263503207] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:01,105 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:01,105 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:01,105 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922385930] [2024-10-15 00:47:01,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:01,105 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:01,105 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:01,105 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2024-10-15 00:47:01,106 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2024-10-15 00:47:01,106 INFO L87 Difference]: Start difference. First operand 16503 states and 30324 transitions. cyclomatic complexity: 13822 Second operand has 4 states, 4 states have (on average 15.5) internal successors, (62), 3 states have internal predecessors, (62), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:01,332 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:01,338 INFO L93 Difference]: Finished difference Result 29408 states and 53990 transitions. [2024-10-15 00:47:01,340 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29408 states and 53990 transitions. [2024-10-15 00:47:01,460 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26041 [2024-10-15 00:47:01,691 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29408 states to 29408 states and 53990 transitions. [2024-10-15 00:47:01,691 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29408 [2024-10-15 00:47:01,717 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29408 [2024-10-15 00:47:01,717 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29408 states and 53990 transitions. [2024-10-15 00:47:01,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:01,737 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29408 states and 53990 transitions. [2024-10-15 00:47:01,755 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29408 states and 53990 transitions. [2024-10-15 00:47:01,946 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29408 to 29398. [2024-10-15 00:47:01,973 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29398 states, 29398 states have (on average 1.8360092523300904) internal successors, (53975), 29397 states have internal predecessors, (53975), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:02,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29398 states to 29398 states and 53975 transitions. [2024-10-15 00:47:02,021 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29398 states and 53975 transitions. [2024-10-15 00:47:02,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2024-10-15 00:47:02,022 INFO L425 stractBuchiCegarLoop]: Abstraction has 29398 states and 53975 transitions. [2024-10-15 00:47:02,022 INFO L332 stractBuchiCegarLoop]: ======== Iteration 22 ============ [2024-10-15 00:47:02,022 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29398 states and 53975 transitions. [2024-10-15 00:47:02,101 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26031 [2024-10-15 00:47:02,102 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:02,102 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:02,110 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:02,110 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:02,110 INFO L745 eck$LassoCheckResult]: Stem: 607629#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 607630#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 608836#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 608335#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 608336#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 607348#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 607349#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 607479#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 607480#L1810 assume !(0 == getOrigin_~person#1); 609568#L1814 assume !(1 == getOrigin_~person#1); 609660#L1818 assume !(2 == getOrigin_~person#1); 607661#L1822 assume !(3 == getOrigin_~person#1); 607662#L1826 assume !(4 == getOrigin_~person#1); 609718#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 607648#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 607649#L2239 assume !(0 == initPersonOnFloor_~floor#1); 607968#L2266 assume 1 == initPersonOnFloor_~floor#1; 607969#L2267 assume !(0 == initPersonOnFloor_~person#1); 608546#L2270 assume !(1 == initPersonOnFloor_~person#1); 608547#L2273 assume !(2 == initPersonOnFloor_~person#1); 607402#L2276 assume !(3 == initPersonOnFloor_~person#1); 607403#L2279 assume !(4 == initPersonOnFloor_~person#1); 608520#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 608130#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 608131#L2031 assume !(0 == callOnFloor_~floorID#1); 608038#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 608039#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 609776#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 609775#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 609774#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 609773#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 609772#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 608994#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 608959#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 608960#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 609748#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 609779#L1309 assume !(0 != timeShift_~tmp___9~2#1); 607694#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 607695#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 608601#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 608902#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 609271#L756 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 608911#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 608812#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 608813#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 609613#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 609778#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 608535#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 607690#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 609253#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 609254#L1128-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 609255#isTopFloor_returnLabel#5 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 609069#L1132-6 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 609070#L1138-8 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 607328#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 607329#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 609026#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 608622#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 608623#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 619917#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 619921#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 619914#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 619912#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 619863#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 619861#L3157-2 [2024-10-15 00:47:02,111 INFO L747 eck$LassoCheckResult]: Loop: 619861#L3157-2 assume !false; 619859#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 619857#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 619855#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 619853#L3165 assume 1 != cleanup_~tmp___0~9#1; 619851#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 619849#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 619847#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 619845#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 619843#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 609744#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 608939#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 607322#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 607639#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 607641#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 623061#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 623060#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 620847#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 620841#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 620838#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 620836#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 620834#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 620828#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 620787#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 620786#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 620785#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 611888#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 611887#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 611885#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 611884#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 611883#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 611882#L756-2 assume !(0 != stopRequestedInDirection_~tmp~6#1); 611877#L762-2 assume ~currentFloorID~0 < 0; 611875#L763-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 610956#L1968-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 610951#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret21#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret21#1;havoc stopRequestedInDirection_#t~ret21#1; 610823#L767-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 610802#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 610799#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 610796#L1128-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 610794#isTopFloor_returnLabel#7 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 610779#L1132-9 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 610771#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 610766#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 610763#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 610762#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 610761#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 610760#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 610751#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 610743#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 610733#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 610731#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 610729#L3157-2 assume !false; 610725#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 610719#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 610707#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 610705#L3165 assume 1 != cleanup_~tmp___0~9#1; 610703#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 610701#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 610699#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 610696#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 610693#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 610691#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 610686#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 610673#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 610662#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 610635#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 610630#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 610618#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 610615#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 610613#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 610611#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 610609#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 610607#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 610604#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 610601#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 610592#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 610591#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 610589#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610588#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 609309#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 609310#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 610548#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 610543#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 610539#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 610536#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 610493#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 610438#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 609805#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 609801#L1128-5 assume !(1 == ~currentHeading~0); 609504#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 609491#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 618008#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 619900#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 619899#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 619898#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 619897#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 619895#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 619896#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 619878#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 619866#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 619864#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 619861#L3157-2 [2024-10-15 00:47:02,111 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:02,111 INFO L85 PathProgramCache]: Analyzing trace with hash -1001257240, now seen corresponding path program 1 times [2024-10-15 00:47:02,111 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:02,112 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [48644190] [2024-10-15 00:47:02,112 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:02,112 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:02,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:02,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:02,176 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:02,176 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [48644190] [2024-10-15 00:47:02,176 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [48644190] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:02,177 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:02,177 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:47:02,177 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [124608030] [2024-10-15 00:47:02,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:02,177 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:02,177 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:02,179 INFO L85 PathProgramCache]: Analyzing trace with hash -1874020625, now seen corresponding path program 1 times [2024-10-15 00:47:02,179 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:02,179 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1852974580] [2024-10-15 00:47:02,179 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:02,180 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:02,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:02,242 INFO L134 CoverageAnalysis]: Checked inductivity of 35 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 15 trivial. 0 not checked. [2024-10-15 00:47:02,242 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:02,243 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1852974580] [2024-10-15 00:47:02,243 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1852974580] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:02,243 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:02,243 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:02,243 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [223789017] [2024-10-15 00:47:02,243 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:02,243 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:02,243 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:02,244 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:47:02,244 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:47:02,245 INFO L87 Difference]: Start difference. First operand 29398 states and 53975 transitions. cyclomatic complexity: 24578 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 5 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:02,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:02,672 INFO L93 Difference]: Finished difference Result 29408 states and 53962 transitions. [2024-10-15 00:47:02,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29408 states and 53962 transitions. [2024-10-15 00:47:02,798 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26041 [2024-10-15 00:47:02,888 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29408 states to 29408 states and 53962 transitions. [2024-10-15 00:47:02,888 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29408 [2024-10-15 00:47:02,913 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29408 [2024-10-15 00:47:02,913 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29408 states and 53962 transitions. [2024-10-15 00:47:02,934 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:02,935 INFO L218 hiAutomatonCegarLoop]: Abstraction has 29408 states and 53962 transitions. [2024-10-15 00:47:02,952 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29408 states and 53962 transitions. [2024-10-15 00:47:03,138 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29408 to 29398. [2024-10-15 00:47:03,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 29398 states, 29398 states have (on average 1.835056806585482) internal successors, (53947), 29397 states have internal predecessors, (53947), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:03,211 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29398 states to 29398 states and 53947 transitions. [2024-10-15 00:47:03,211 INFO L240 hiAutomatonCegarLoop]: Abstraction has 29398 states and 53947 transitions. [2024-10-15 00:47:03,211 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-15 00:47:03,212 INFO L425 stractBuchiCegarLoop]: Abstraction has 29398 states and 53947 transitions. [2024-10-15 00:47:03,212 INFO L332 stractBuchiCegarLoop]: ======== Iteration 23 ============ [2024-10-15 00:47:03,212 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29398 states and 53947 transitions. [2024-10-15 00:47:03,296 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 26031 [2024-10-15 00:47:03,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:03,296 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:03,303 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:03,304 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:03,304 INFO L745 eck$LassoCheckResult]: Stem: 666449#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 666450#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 667642#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 667148#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 667149#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 666167#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 666168#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 666299#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 666300#L1810 assume !(0 == getOrigin_~person#1); 668365#L1814 assume !(1 == getOrigin_~person#1); 668445#L1818 assume !(2 == getOrigin_~person#1); 666482#L1822 assume !(3 == getOrigin_~person#1); 666483#L1826 assume !(4 == getOrigin_~person#1); 668498#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 666469#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 666470#L2239 assume !(0 == initPersonOnFloor_~floor#1); 666787#L2266 assume 1 == initPersonOnFloor_~floor#1; 666788#L2267 assume !(0 == initPersonOnFloor_~person#1); 667352#L2270 assume !(1 == initPersonOnFloor_~person#1); 667353#L2273 assume !(2 == initPersonOnFloor_~person#1); 666221#L2276 assume !(3 == initPersonOnFloor_~person#1); 666222#L2279 assume !(4 == initPersonOnFloor_~person#1); 667326#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 666945#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 666946#L2031 assume !(0 == callOnFloor_~floorID#1); 666852#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 666853#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 668549#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 668548#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 668547#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 668546#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 668545#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 667797#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 667763#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 667764#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 668523#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 668552#L1309 assume !(0 != timeShift_~tmp___9~2#1); 666515#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 666516#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 667409#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 667707#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 668072#L756 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 667716#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 667619#L1408 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 667620#L1183 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 668400#getReverseHeading_returnLabel#1 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 668551#L752-1 assume !(1 == stopRequestedInDirection_~dir#1); 667341#L921-1 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 666511#stopRequestedInDirection_returnLabel#2 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 668051#L1417 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 668052#L1128-2 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 668053#isTopFloor_returnLabel#5 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 667873#L1132-6 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 667874#L1138-8 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 668266#L1144-5 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669245#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 669244#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669243#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669242#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 669231#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 669235#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 669228#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 669226#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 669223#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 669224#L3157-2 [2024-10-15 00:47:03,304 INFO L747 eck$LassoCheckResult]: Loop: 669224#L3157-2 assume !false; 669213#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 669214#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 669198#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 669199#L3165 assume 1 != cleanup_~tmp___0~9#1; 669186#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 669187#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 669177#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 669178#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 668682#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 668683#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 668673#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 668671#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 668647#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 668635#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 668628#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 668625#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 668624#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 668621#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 668620#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 669215#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 669216#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 669195#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 669194#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 669183#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 669185#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 668957#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 668956#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 668573#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 668571#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 668568#L921-2 assume !(0 == ~currentFloorID~0); 668569#L927-2 assume ~currentFloorID~0 > 0; 668561#L928-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 668562#L1968-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 668883#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1; 668559#L932-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 668560#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 669291#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 669286#L1128-3 assume !(1 == ~currentHeading~0); 669279#L1138-9 assume !(0 == ~currentFloorID~0); 669272#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669269#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669267#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 669266#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669265#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 669264#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 669263#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 669261#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 669250#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 669251#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 669218#L3157-2 assume !false; 669219#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 669201#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 669202#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 669191#L3165 assume 1 != cleanup_~tmp___0~9#1; 669192#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 669179#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 669180#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 668684#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 668685#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 668680#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 668681#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 668654#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 668655#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 674656#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 674654#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 674652#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 674649#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 674647#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 674645#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 674643#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 674641#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 674638#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 674636#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 674633#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 674632#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 674630#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 674628#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 674629#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 674563#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 674698#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 674558#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 674696#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 674687#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 674582#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 674561#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 674559#L1417-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 669761#L1183-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 669757#getReverseHeading_returnLabel#4 timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 669753#L1128-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 669750#isTopFloor_returnLabel#9 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 669744#L1132-12 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 669741#L1138-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 669738#L1144-9 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 669737#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 669736#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 669735#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 669732#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 669731#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 666728#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 666729#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 669252#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 669225#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 669224#L3157-2 [2024-10-15 00:47:03,305 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:03,305 INFO L85 PathProgramCache]: Analyzing trace with hash -300192662, now seen corresponding path program 1 times [2024-10-15 00:47:03,305 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:03,305 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1829913400] [2024-10-15 00:47:03,305 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:03,305 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:03,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:03,396 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:03,397 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:03,397 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1829913400] [2024-10-15 00:47:03,397 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1829913400] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:03,397 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:03,397 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2024-10-15 00:47:03,397 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065522551] [2024-10-15 00:47:03,397 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:03,397 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:03,397 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:03,398 INFO L85 PathProgramCache]: Analyzing trace with hash 751399734, now seen corresponding path program 1 times [2024-10-15 00:47:03,398 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:03,398 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1268153884] [2024-10-15 00:47:03,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:03,398 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:03,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:03,679 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-10-15 00:47:03,680 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:03,680 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1268153884] [2024-10-15 00:47:03,680 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1268153884] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:03,680 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:03,680 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:03,680 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1099262428] [2024-10-15 00:47:03,680 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:03,681 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:03,681 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:03,681 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:47:03,681 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:47:03,681 INFO L87 Difference]: Start difference. First operand 29398 states and 53947 transitions. cyclomatic complexity: 24550 Second operand has 5 states, 5 states have (on average 12.8) internal successors, (64), 4 states have internal predecessors, (64), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:04,142 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:04,142 INFO L93 Difference]: Finished difference Result 33437 states and 61367 transitions. [2024-10-15 00:47:04,142 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33437 states and 61367 transitions. [2024-10-15 00:47:04,297 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29949 [2024-10-15 00:47:04,409 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33437 states to 33437 states and 61367 transitions. [2024-10-15 00:47:04,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33437 [2024-10-15 00:47:04,442 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33437 [2024-10-15 00:47:04,442 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33437 states and 61367 transitions. [2024-10-15 00:47:04,470 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:04,470 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33437 states and 61367 transitions. [2024-10-15 00:47:04,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33437 states and 61367 transitions. [2024-10-15 00:47:04,781 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33437 to 33311. [2024-10-15 00:47:04,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33311 states, 33311 states have (on average 1.8363303413286902) internal successors, (61170), 33310 states have internal predecessors, (61170), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:04,881 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33311 states to 33311 states and 61170 transitions. [2024-10-15 00:47:04,881 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33311 states and 61170 transitions. [2024-10-15 00:47:04,881 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-15 00:47:04,882 INFO L425 stractBuchiCegarLoop]: Abstraction has 33311 states and 61170 transitions. [2024-10-15 00:47:04,882 INFO L332 stractBuchiCegarLoop]: ======== Iteration 24 ============ [2024-10-15 00:47:04,882 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33311 states and 61170 transitions. [2024-10-15 00:47:04,999 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29878 [2024-10-15 00:47:05,000 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:05,000 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:05,008 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:05,008 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:05,009 INFO L745 eck$LassoCheckResult]: Stem: 729300#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 729301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 730497#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 730001#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 730002#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 729018#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 729019#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 729150#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 729151#L1810 assume !(0 == getOrigin_~person#1); 731213#L1814 assume !(1 == getOrigin_~person#1); 731299#L1818 assume !(2 == getOrigin_~person#1); 729332#L1822 assume !(3 == getOrigin_~person#1); 729333#L1826 assume !(4 == getOrigin_~person#1); 731344#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 729319#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 729320#L2239 assume !(0 == initPersonOnFloor_~floor#1); 729640#L2266 assume 1 == initPersonOnFloor_~floor#1; 729641#L2267 assume !(0 == initPersonOnFloor_~person#1); 730210#L2270 assume !(1 == initPersonOnFloor_~person#1); 730211#L2273 assume !(2 == initPersonOnFloor_~person#1); 729073#L2276 assume !(3 == initPersonOnFloor_~person#1); 729074#L2279 assume !(4 == initPersonOnFloor_~person#1); 730184#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 729797#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 729798#L2031 assume !(0 == callOnFloor_~floorID#1); 729704#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 729705#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 731395#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 731394#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 731393#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 731392#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 731391#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 730654#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 730618#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 730619#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 731370#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 731398#L1309 assume !(0 != timeShift_~tmp___9~2#1); 729365#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 729366#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 730268#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 730563#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 730924#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 731090#L762 assume !(~currentFloorID~0 < 0); 729934#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 729935#$Ultimate##2220 assume ~currentFloorID~0 < 1; 730645#L792 assume !(0 != stopRequestedInDirection_~respectFloorCalls#1); 729711#$Ultimate##2236 assume ~currentFloorID~0 < 1; 731103#L808 assume 0 != stopRequestedInDirection_~respectInLiftCalls#1; 731030#L809 assume 0 != ~floorButtons_1~0;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 729710#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 731396#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 730141#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 730142#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 730144#L1132 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 730843#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 730844#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732061#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 732060#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732059#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732058#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 732047#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 732051#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 732044#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 732042#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 732040#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 732037#L3157-2 [2024-10-15 00:47:05,009 INFO L747 eck$LassoCheckResult]: Loop: 732037#L3157-2 assume !false; 732033#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 732032#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 732031#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 732018#L3165 assume 1 != cleanup_~tmp___0~9#1; 732011#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 732010#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 732009#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 731513#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 731510#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 731511#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 752728#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 731490#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 731491#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 746522#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 732029#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 732028#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 732026#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 732027#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 747796#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 747705#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 747706#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 747715#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 747713#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 747711#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 747712#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 747696#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 731718#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 731716#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 731714#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 731713#L921-2 assume !(0 == ~currentFloorID~0); 731712#L927-2 assume ~currentFloorID~0 > 0; 731711#L928-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 731710#L1968-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 731709#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1; 731404#L932-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 731405#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 732107#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 732102#L1128-3 assume !(1 == ~currentHeading~0); 732095#L1138-9 assume !(0 == ~currentFloorID~0); 732088#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732085#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732083#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 732082#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732081#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 732080#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 732079#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 732075#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 732076#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 745006#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 745005#L3157-2 assume !false; 745004#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 745003#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 745002#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 745001#L3165 assume 1 != cleanup_~tmp___0~9#1; 745000#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 744999#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 744998#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 744996#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 744997#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 731509#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 731507#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 731505#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 731486#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 731474#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 732030#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 746519#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 746517#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 746515#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 746512#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 746510#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 746508#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 746507#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 746506#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 741371#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 741365#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 741363#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 741361#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 730960#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 730961#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 762199#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 762197#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 762196#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 762195#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 731024#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 728940#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 731112#L1417-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 730576#L1183-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 730577#getReverseHeading_returnLabel#4 timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 730653#L1128-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 732594#isTopFloor_returnLabel#9 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 732581#L1132-12 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 732577#L1138-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 732574#L1144-9 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 732573#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 732572#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 732571#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 732566#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 732068#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 732073#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 732071#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 732064#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 732041#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 732037#L3157-2 [2024-10-15 00:47:05,010 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:05,010 INFO L85 PathProgramCache]: Analyzing trace with hash 578404190, now seen corresponding path program 1 times [2024-10-15 00:47:05,010 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:05,010 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1327742846] [2024-10-15 00:47:05,011 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:05,011 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:05,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:05,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:05,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:05,281 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1327742846] [2024-10-15 00:47:05,281 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1327742846] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:05,281 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:05,281 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:47:05,281 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1000758460] [2024-10-15 00:47:05,281 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:05,281 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:05,282 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:05,282 INFO L85 PathProgramCache]: Analyzing trace with hash 1241527032, now seen corresponding path program 1 times [2024-10-15 00:47:05,282 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:05,282 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1815636070] [2024-10-15 00:47:05,282 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:05,282 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:05,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:05,348 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-10-15 00:47:05,348 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:05,348 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1815636070] [2024-10-15 00:47:05,348 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1815636070] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:05,348 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:05,348 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:05,349 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [721951824] [2024-10-15 00:47:05,349 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:05,349 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:05,349 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:05,349 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:47:05,349 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:47:05,349 INFO L87 Difference]: Start difference. First operand 33311 states and 61170 transitions. cyclomatic complexity: 27861 Second operand has 5 states, 5 states have (on average 13.0) internal successors, (65), 5 states have internal predecessors, (65), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:05,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:05,537 INFO L93 Difference]: Finished difference Result 33428 states and 61203 transitions. [2024-10-15 00:47:05,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33428 states and 61203 transitions. [2024-10-15 00:47:05,677 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29992 [2024-10-15 00:47:05,779 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33428 states to 33428 states and 61203 transitions. [2024-10-15 00:47:05,779 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33428 [2024-10-15 00:47:05,810 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33428 [2024-10-15 00:47:05,810 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33428 states and 61203 transitions. [2024-10-15 00:47:05,835 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:05,835 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33428 states and 61203 transitions. [2024-10-15 00:47:05,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33428 states and 61203 transitions. [2024-10-15 00:47:06,079 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33428 to 33311. [2024-10-15 00:47:06,109 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33311 states, 33311 states have (on average 1.8312869622647174) internal successors, (61002), 33310 states have internal predecessors, (61002), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:06,166 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33311 states to 33311 states and 61002 transitions. [2024-10-15 00:47:06,167 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33311 states and 61002 transitions. [2024-10-15 00:47:06,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2024-10-15 00:47:06,167 INFO L425 stractBuchiCegarLoop]: Abstraction has 33311 states and 61002 transitions. [2024-10-15 00:47:06,167 INFO L332 stractBuchiCegarLoop]: ======== Iteration 25 ============ [2024-10-15 00:47:06,167 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33311 states and 61002 transitions. [2024-10-15 00:47:06,453 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 29878 [2024-10-15 00:47:06,453 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:06,453 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:06,459 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:06,459 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:06,459 INFO L745 eck$LassoCheckResult]: Stem: 796056#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 796057#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 797265#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 796768#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 796769#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 795770#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 795771#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 795902#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 795903#L1810 assume !(0 == getOrigin_~person#1); 798014#L1814 assume !(1 == getOrigin_~person#1); 798108#L1818 assume !(2 == getOrigin_~person#1); 796089#L1822 assume !(3 == getOrigin_~person#1); 796090#L1826 assume !(4 == getOrigin_~person#1); 798161#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 796074#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 796075#L2239 assume !(0 == initPersonOnFloor_~floor#1); 796397#L2266 assume 1 == initPersonOnFloor_~floor#1; 796398#L2267 assume !(0 == initPersonOnFloor_~person#1); 796973#L2270 assume !(1 == initPersonOnFloor_~person#1); 796974#L2273 assume !(2 == initPersonOnFloor_~person#1); 795825#L2276 assume !(3 == initPersonOnFloor_~person#1); 795826#L2279 assume !(4 == initPersonOnFloor_~person#1); 796948#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 796560#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 796561#L2031 assume !(0 == callOnFloor_~floorID#1); 796465#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 796466#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 798220#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 798219#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 798218#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 798217#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 798216#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 797423#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 797387#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 797388#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 798186#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 798223#L1309 assume !(0 != timeShift_~tmp___9~2#1); 796122#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 796123#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 797029#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 797332#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 797710#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 797886#L762 assume !(~currentFloorID~0 < 0); 796699#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 796700#$Ultimate##2220 assume ~currentFloorID~0 < 1; 797415#L792 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 796084#L1968-2 assume !(0 == isFloorCalling_~floorID#1); 796085#L1972-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 796863#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret22#1;havoc stopRequestedInDirection_#t~ret22#1; 796470#L796 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 796471#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 798221#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 796906#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 796907#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 796910#L1132 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 797622#L1138-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 797623#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 806454#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 806453#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 806452#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 806448#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 806291#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 806295#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 806288#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 806277#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 806274#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 806273#L3157-2 [2024-10-15 00:47:06,460 INFO L747 eck$LassoCheckResult]: Loop: 806273#L3157-2 assume !false; 806272#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 806271#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 806270#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 806163#L3165 assume 1 != cleanup_~tmp___0~9#1; 806158#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 806152#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 798398#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 798330#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 798328#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 798327#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 798325#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 798310#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 798306#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 798292#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 798290#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 798288#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 798287#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 798284#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 798282#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 798277#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 798275#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 798265#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 798260#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 798256#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 798252#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 798253#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 798248#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 798247#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 798240#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 798236#L921-2 assume !(0 == ~currentFloorID~0); 798237#L927-2 assume ~currentFloorID~0 > 0; 798242#L928-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 798243#L1968-32 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 798234#isFloorCalling_returnLabel#33 stopRequestedInDirection_#t~ret26#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___9~0#1 := stopRequestedInDirection_#t~ret26#1;havoc stopRequestedInDirection_#t~ret26#1; 798235#L932-2 assume 0 != stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 798717#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 801093#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 801091#L1128-3 assume !(1 == ~currentHeading~0); 801087#L1138-9 assume !(0 == ~currentFloorID~0); 801083#L1138-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 801067#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 801063#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 801062#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 801060#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 801058#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 801057#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 801054#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 801045#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 801044#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 801043#L3157-2 assume !false; 801042#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 801037#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 801035#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 801034#L3165 assume 1 != cleanup_~tmp___0~9#1; 801033#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 801032#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 801031#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 801030#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 801028#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 801027#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 801025#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 801022#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 801021#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 801010#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 801009#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 801008#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 801006#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 801007#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 807079#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 807077#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 807075#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 807072#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 807069#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 807066#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 807056#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 807053#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 807050#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 807046#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 807042#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 807041#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 807039#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 807026#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 807013#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 806989#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 806451#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 806446#L1417-3 assume 0 != timeShift_~tmp___7~2#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 806343#L1183-3 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 806442#getReverseHeading_returnLabel#4 timeShift_#t~ret56#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~2#1 := timeShift_#t~ret56#1;havoc timeShift_#t~ret56#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~2#1;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 806439#L1128-4 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 806438#isTopFloor_returnLabel#9 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 806348#L1132-12 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 806347#L1138-14 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 806329#L1144-9 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 806328#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 806327#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 806326#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 806325#$Ultimate##5385 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 806279#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 806284#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 806282#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 806276#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 806275#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 806273#L3157-2 [2024-10-15 00:47:06,460 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:06,460 INFO L85 PathProgramCache]: Analyzing trace with hash -1610221306, now seen corresponding path program 1 times [2024-10-15 00:47:06,460 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:06,460 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [372585835] [2024-10-15 00:47:06,460 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:06,460 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:06,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:06,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:06,618 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:06,618 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [372585835] [2024-10-15 00:47:06,618 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [372585835] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:06,618 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:06,618 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:06,618 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [498037806] [2024-10-15 00:47:06,619 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:06,619 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:06,619 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:06,619 INFO L85 PathProgramCache]: Analyzing trace with hash 1241527032, now seen corresponding path program 2 times [2024-10-15 00:47:06,619 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:06,619 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [465685845] [2024-10-15 00:47:06,619 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:06,619 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:06,638 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:06,710 INFO L134 CoverageAnalysis]: Checked inductivity of 36 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2024-10-15 00:47:06,710 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:06,710 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [465685845] [2024-10-15 00:47:06,710 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [465685845] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:06,711 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:06,711 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:06,711 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2060016256] [2024-10-15 00:47:06,711 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:06,711 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:06,711 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:06,712 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-15 00:47:06,712 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2024-10-15 00:47:06,712 INFO L87 Difference]: Start difference. First operand 33311 states and 61002 transitions. cyclomatic complexity: 27693 Second operand has 7 states, 7 states have (on average 9.428571428571429) internal successors, (66), 7 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:07,407 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:07,407 INFO L93 Difference]: Finished difference Result 34027 states and 62146 transitions. [2024-10-15 00:47:07,407 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34027 states and 62146 transitions. [2024-10-15 00:47:07,536 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30621 [2024-10-15 00:47:07,631 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34027 states to 34027 states and 62146 transitions. [2024-10-15 00:47:07,631 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34027 [2024-10-15 00:47:07,660 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34027 [2024-10-15 00:47:07,660 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34027 states and 62146 transitions. [2024-10-15 00:47:07,684 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:07,684 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34027 states and 62146 transitions. [2024-10-15 00:47:07,705 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34027 states and 62146 transitions. [2024-10-15 00:47:08,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34027 to 33980. [2024-10-15 00:47:08,179 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33980 states, 33980 states have (on average 1.82751618599176) internal successors, (62099), 33979 states have internal predecessors, (62099), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:08,236 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33980 states to 33980 states and 62099 transitions. [2024-10-15 00:47:08,236 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33980 states and 62099 transitions. [2024-10-15 00:47:08,237 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2024-10-15 00:47:08,237 INFO L425 stractBuchiCegarLoop]: Abstraction has 33980 states and 62099 transitions. [2024-10-15 00:47:08,237 INFO L332 stractBuchiCegarLoop]: ======== Iteration 26 ============ [2024-10-15 00:47:08,237 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33980 states and 62099 transitions. [2024-10-15 00:47:08,330 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 30574 [2024-10-15 00:47:08,330 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:08,330 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:08,337 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:08,338 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:08,338 INFO L745 eck$LassoCheckResult]: Stem: 863407#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 863408#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 864601#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 864108#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 864109#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 863126#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 863127#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 863257#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 863258#L1810 assume !(0 == getOrigin_~person#1); 865343#L1814 assume !(1 == getOrigin_~person#1); 865432#L1818 assume !(2 == getOrigin_~person#1); 863441#L1822 assume !(3 == getOrigin_~person#1); 863442#L1826 assume !(4 == getOrigin_~person#1); 865484#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 863426#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 863427#L2239 assume !(0 == initPersonOnFloor_~floor#1); 863751#L2266 assume 1 == initPersonOnFloor_~floor#1; 863752#L2267 assume !(0 == initPersonOnFloor_~person#1); 864316#L2270 assume !(1 == initPersonOnFloor_~person#1); 864317#L2273 assume !(2 == initPersonOnFloor_~person#1); 863182#L2276 assume !(3 == initPersonOnFloor_~person#1); 863183#L2279 assume !(4 == initPersonOnFloor_~person#1); 864291#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 863909#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 863910#L2031 assume !(0 == callOnFloor_~floorID#1); 863816#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 863817#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 865544#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 865543#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 865542#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 865541#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 865540#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 864758#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 864722#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 864723#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 865514#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 865547#L1309 assume !(0 != timeShift_~tmp___9~2#1); 863475#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 863476#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 864372#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 864667#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 865038#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 865209#L762 assume !(~currentFloorID~0 < 0); 864043#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 864044#$Ultimate##2220 assume ~currentFloorID~0 < 1; 864750#L792 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 863436#L1968-2 assume !(0 == isFloorCalling_~floorID#1); 863437#L1972-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 864206#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret22#1;havoc stopRequestedInDirection_#t~ret22#1; 863821#L796 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 863822#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 865545#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 864248#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 864249#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 864252#L1132 assume !(0 != continueInDirection_~tmp~7#1); 864953#L1138-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 864954#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 863107#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 865033#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 864393#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 864394#$Ultimate##2701 assume !(1 == __utac_acc__Specification2_spec__3_~floor~0#1); 870168#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 870172#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 870165#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 870160#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 870156#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 870153#L3157-2 [2024-10-15 00:47:08,338 INFO L747 eck$LassoCheckResult]: Loop: 870153#L3157-2 assume !false; 870150#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 870147#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 870143#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 870139#L3165 assume 1 != cleanup_~tmp___0~9#1; 870136#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 870134#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870131#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 870077#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 870075#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 870070#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 870066#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870063#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 870062#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 870029#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 870026#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 870021#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 869978#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 869979#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 878424#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 878423#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 878422#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 878419#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 878417#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 878416#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 878415#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 878361#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 866063#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 866060#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 866053#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 866051#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 866044#L756-2 assume !(0 != stopRequestedInDirection_~tmp~6#1); 866045#L762-2 assume ~currentFloorID~0 < 0; 870310#L763-2 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 870309#L1968-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870308#isFloorCalling_returnLabel#28 stopRequestedInDirection_#t~ret21#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___4~1#1 := stopRequestedInDirection_#t~ret21#1;havoc stopRequestedInDirection_#t~ret21#1; 870276#L767-2 assume 0 != stopRequestedInDirection_~tmp___4~1#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 870271#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 870269#L1408-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 870268#L1128-3 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 870267#isTopFloor_returnLabel#7 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 870266#L1132-9 assume !(0 != continueInDirection_~tmp~7#1); 870265#L1138-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 870263#L1144-7 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 870259#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 870258#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 870255#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 870253#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 870254#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 870193#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 870183#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 870163#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 870159#L3157-2 assume !false; 870155#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 870152#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 870149#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 870146#L3165 assume 1 != cleanup_~tmp___0~9#1; 870142#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 870138#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870135#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 870132#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 870129#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 870124#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 870109#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870096#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 870051#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 870028#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 870025#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 869996#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 869997#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 870018#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 870016#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 870014#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 870012#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 870008#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 870004#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 870001#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 869991#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 869989#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 869988#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 869987#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 869985#L756-2 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 869984#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 869983#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 869981#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 869982#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 884095#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 875920#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 874130#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 874125#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 865169#L1128-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 864195#isTopFloor_returnLabel#10 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 864196#L1132-15 assume !(0 != continueInDirection_~tmp~7#1); 865259#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 870238#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 870234#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 870232#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 870230#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 870229#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 870222#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 870220#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 870173#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 870161#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 870157#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 870153#L3157-2 [2024-10-15 00:47:08,339 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:08,339 INFO L85 PathProgramCache]: Analyzing trace with hash -2053120446, now seen corresponding path program 1 times [2024-10-15 00:47:08,339 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:08,339 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715769779] [2024-10-15 00:47:08,339 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:08,339 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:08,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:08,420 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:08,420 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:08,420 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715769779] [2024-10-15 00:47:08,420 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1715769779] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:08,421 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:08,421 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:47:08,421 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [712038371] [2024-10-15 00:47:08,421 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:08,421 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:08,421 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:08,422 INFO L85 PathProgramCache]: Analyzing trace with hash -1730019869, now seen corresponding path program 1 times [2024-10-15 00:47:08,422 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:08,422 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1599826377] [2024-10-15 00:47:08,423 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:08,423 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:08,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:08,493 INFO L134 CoverageAnalysis]: Checked inductivity of 37 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 17 trivial. 0 not checked. [2024-10-15 00:47:08,494 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:08,494 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1599826377] [2024-10-15 00:47:08,494 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1599826377] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:08,494 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:08,494 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:08,494 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [121275705] [2024-10-15 00:47:08,494 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:08,495 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:08,495 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:08,495 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2024-10-15 00:47:08,495 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2024-10-15 00:47:08,495 INFO L87 Difference]: Start difference. First operand 33980 states and 62099 transitions. cyclomatic complexity: 28121 Second operand has 6 states, 6 states have (on average 11.0) internal successors, (66), 5 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:09,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:09,165 INFO L93 Difference]: Finished difference Result 59466 states and 108205 transitions. [2024-10-15 00:47:09,165 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59466 states and 108205 transitions. [2024-10-15 00:47:09,710 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 55958 [2024-10-15 00:47:09,903 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59466 states to 59426 states and 108157 transitions. [2024-10-15 00:47:09,903 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59426 [2024-10-15 00:47:09,958 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59426 [2024-10-15 00:47:09,958 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59426 states and 108157 transitions. [2024-10-15 00:47:10,003 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:10,003 INFO L218 hiAutomatonCegarLoop]: Abstraction has 59426 states and 108157 transitions. [2024-10-15 00:47:10,045 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59426 states and 108157 transitions. [2024-10-15 00:47:10,601 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59426 to 55381. [2024-10-15 00:47:10,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 55381 states, 55381 states have (on average 1.8204077210595693) internal successors, (100816), 55380 states have internal predecessors, (100816), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:10,760 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55381 states to 55381 states and 100816 transitions. [2024-10-15 00:47:10,760 INFO L240 hiAutomatonCegarLoop]: Abstraction has 55381 states and 100816 transitions. [2024-10-15 00:47:10,761 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 00:47:10,761 INFO L425 stractBuchiCegarLoop]: Abstraction has 55381 states and 100816 transitions. [2024-10-15 00:47:10,761 INFO L332 stractBuchiCegarLoop]: ======== Iteration 27 ============ [2024-10-15 00:47:10,761 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55381 states and 100816 transitions. [2024-10-15 00:47:11,173 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 51919 [2024-10-15 00:47:11,173 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:11,173 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:11,182 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:11,182 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:11,182 INFO L745 eck$LassoCheckResult]: Stem: 956877#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 956878#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 958095#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 957586#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 957587#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 956593#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 956594#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 956725#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 956726#L1810 assume !(0 == getOrigin_~person#1); 958875#L1814 assume !(1 == getOrigin_~person#1); 958974#L1818 assume !(2 == getOrigin_~person#1); 956909#L1822 assume !(3 == getOrigin_~person#1); 956910#L1826 assume !(4 == getOrigin_~person#1); 959034#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 956895#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 956896#L2239 assume !(0 == initPersonOnFloor_~floor#1); 957218#L2266 assume 1 == initPersonOnFloor_~floor#1; 957219#L2267 assume !(0 == initPersonOnFloor_~person#1); 957800#L2270 assume !(1 == initPersonOnFloor_~person#1); 957801#L2273 assume !(2 == initPersonOnFloor_~person#1); 956649#L2276 assume !(3 == initPersonOnFloor_~person#1); 956650#L2279 assume !(4 == initPersonOnFloor_~person#1); 957775#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 957377#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 957378#L2031 assume !(0 == callOnFloor_~floorID#1); 957282#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 957283#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 959104#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 959103#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 959102#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 959101#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 959100#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 958261#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 958221#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 958222#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 959063#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 959107#L1309 assume !(0 != timeShift_~tmp___9~2#1); 956941#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 956942#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 957858#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 958164#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 958560#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 958742#L762 assume !(~currentFloorID~0 < 0); 957516#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 957517#$Ultimate##2220 assume ~currentFloorID~0 < 1; 958253#L792 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 956904#L1968-2 assume !(0 == isFloorCalling_~floorID#1); 956905#L1972-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 957686#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret22#1;havoc stopRequestedInDirection_#t~ret22#1; 957287#L796 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 957288#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 959105#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 957731#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 957732#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 957735#L1132 assume !(0 != continueInDirection_~tmp~7#1); 958470#L1138-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 958471#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 956574#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 959112#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 957878#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 957879#$Ultimate##2701 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 958638#L181 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 960827#areDoorsOpen_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 960824#L185 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 960822#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 960820#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 960818#L3157-2 [2024-10-15 00:47:11,183 INFO L747 eck$LassoCheckResult]: Loop: 960818#L3157-2 assume !false; 960817#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 960812#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 960810#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 960800#L3165 assume 1 != cleanup_~tmp___0~9#1; 960798#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 960796#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 960794#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 960791#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 960788#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 960789#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 963882#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 963879#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 960776#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 960766#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 960759#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 960760#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 960755#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 960752#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 960750#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 960745#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 960743#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 959959#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 959956#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 959952#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 959950#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 959946#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 959943#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 959940#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 959938#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 959936#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 959932#L756-2 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 959930#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 959928#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 959924#L1183-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 959925#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 959970#L752-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 959920#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 959807#L756-3 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 959808#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 959797#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 959795#L1128-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 959796#isTopFloor_returnLabel#10 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 959500#L1132-15 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 959501#L1138-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 959430#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 959428#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 959405#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 959406#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 960508#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 960509#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 959357#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 959296#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 959297#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 959292#L3157-2 assume !false; 959293#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 959287#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 959288#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 959281#L3165 assume 1 != cleanup_~tmp___0~9#1; 959282#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 959275#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 959276#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 959268#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 959270#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 959259#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 959260#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 960497#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 959193#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 959183#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 959164#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 959165#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 959156#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 959152#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 959153#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 959143#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 959144#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 959135#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 959136#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 959126#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 959127#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 959116#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 959117#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 958601#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 958602#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 976074#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 976072#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 976018#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 976019#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 975899#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 975892#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 975890#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 971868#L1128-5 assume !(1 == ~currentHeading~0); 975732#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 975730#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 975729#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 975726#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 975725#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 975724#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 975723#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 975721#L181-1 assume 0 != ~floorButtons_spc2_1~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 975704#areDoorsOpen_returnLabel#7 __utac_acc__Specification2_spec__3_#t~ret7#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___3~0#1 := __utac_acc__Specification2_spec__3_#t~ret7#1;havoc __utac_acc__Specification2_spec__3_#t~ret7#1; 975688#L185-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___3~0#1;~floorButtons_spc2_1~0 := 0; 960823#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 960821#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 960818#L3157-2 [2024-10-15 00:47:11,183 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:11,183 INFO L85 PathProgramCache]: Analyzing trace with hash 1751719552, now seen corresponding path program 1 times [2024-10-15 00:47:11,183 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:11,183 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [289494591] [2024-10-15 00:47:11,184 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:11,184 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:11,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:11,222 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2024-10-15 00:47:11,222 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:11,222 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [289494591] [2024-10-15 00:47:11,222 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [289494591] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:11,222 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:11,222 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2024-10-15 00:47:11,222 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985459354] [2024-10-15 00:47:11,222 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:11,223 INFO L750 eck$LassoCheckResult]: stem already infeasible [2024-10-15 00:47:11,223 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:11,223 INFO L85 PathProgramCache]: Analyzing trace with hash 1945342046, now seen corresponding path program 1 times [2024-10-15 00:47:11,223 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:11,223 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1195587308] [2024-10-15 00:47:11,223 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:11,223 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:11,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:11,289 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-10-15 00:47:11,290 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:11,290 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1195587308] [2024-10-15 00:47:11,290 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1195587308] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:11,290 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:11,290 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:11,290 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1538511155] [2024-10-15 00:47:11,290 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:11,290 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:11,290 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:11,291 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2024-10-15 00:47:11,291 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2024-10-15 00:47:11,291 INFO L87 Difference]: Start difference. First operand 55381 states and 100816 transitions. cyclomatic complexity: 45437 Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:11,620 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:11,620 INFO L93 Difference]: Finished difference Result 109833 states and 199987 transitions. [2024-10-15 00:47:11,620 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109833 states and 199987 transitions. [2024-10-15 00:47:12,085 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 103702 [2024-10-15 00:47:12,867 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109833 states to 109833 states and 199987 transitions. [2024-10-15 00:47:12,867 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109833 [2024-10-15 00:47:12,959 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109833 [2024-10-15 00:47:12,959 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109833 states and 199987 transitions. [2024-10-15 00:47:13,028 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:13,028 INFO L218 hiAutomatonCegarLoop]: Abstraction has 109833 states and 199987 transitions. [2024-10-15 00:47:13,097 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109833 states and 199987 transitions. [2024-10-15 00:47:14,099 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109833 to 109833. [2024-10-15 00:47:14,190 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 109833 states, 109833 states have (on average 1.8208279843034425) internal successors, (199987), 109832 states have internal predecessors, (199987), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:14,390 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 109833 states to 109833 states and 199987 transitions. [2024-10-15 00:47:14,390 INFO L240 hiAutomatonCegarLoop]: Abstraction has 109833 states and 199987 transitions. [2024-10-15 00:47:14,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2024-10-15 00:47:14,391 INFO L425 stractBuchiCegarLoop]: Abstraction has 109833 states and 199987 transitions. [2024-10-15 00:47:14,391 INFO L332 stractBuchiCegarLoop]: ======== Iteration 28 ============ [2024-10-15 00:47:14,391 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 109833 states and 199987 transitions. [2024-10-15 00:47:14,695 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 103702 [2024-10-15 00:47:14,695 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:14,695 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:14,716 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:14,716 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:14,717 INFO L745 eck$LassoCheckResult]: Stem: 1122100#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 1122101#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1123325#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1122818#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1122819#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 1121818#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1121819#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1121950#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 1121951#L1810 assume !(0 == getOrigin_~person#1); 1124103#L1814 assume !(1 == getOrigin_~person#1); 1124203#L1818 assume !(2 == getOrigin_~person#1); 1122132#L1822 assume !(3 == getOrigin_~person#1); 1122133#L1826 assume !(4 == getOrigin_~person#1); 1124257#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 1122118#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1122119#L2239 assume !(0 == initPersonOnFloor_~floor#1); 1122447#L2266 assume 1 == initPersonOnFloor_~floor#1; 1122448#L2267 assume !(0 == initPersonOnFloor_~person#1); 1123031#L2270 assume !(1 == initPersonOnFloor_~person#1); 1123032#L2273 assume !(2 == initPersonOnFloor_~person#1); 1121872#L2276 assume !(3 == initPersonOnFloor_~person#1); 1121873#L2279 assume !(4 == initPersonOnFloor_~person#1); 1123006#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1122612#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1122613#L2031 assume !(0 == callOnFloor_~floorID#1); 1122517#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1122518#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1124321#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1124320#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1124319#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1124318#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1124317#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1123485#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1123450#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1123451#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1124293#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1124324#L1309 assume !(0 != timeShift_~tmp___9~2#1); 1122165#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 1122166#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1123087#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1123392#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1123786#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 1123969#L762 assume !(~currentFloorID~0 < 0); 1122750#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 1122751#$Ultimate##2220 assume ~currentFloorID~0 < 1; 1123477#L792 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1122127#L1968-2 assume !(0 == isFloorCalling_~floorID#1); 1122128#L1972-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1122919#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret22#1;havoc stopRequestedInDirection_#t~ret22#1; 1122522#L796 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1122523#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1124322#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1122964#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1122965#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 1122968#L1132 assume !(0 != continueInDirection_~tmp~7#1); 1123693#L1138-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1123694#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1121799#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1123519#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1123107#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1123108#$Ultimate##2701 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1123864#L181 assume !(0 != ~floorButtons_spc2_1~0); 1121952#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1121953#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1122446#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1123529#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1123530#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1124211#L3157-2 [2024-10-15 00:47:14,717 INFO L747 eck$LassoCheckResult]: Loop: 1124211#L3157-2 assume !false; 1201148#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1201147#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 1201146#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1201141#L3165 assume 1 != cleanup_~tmp___0~9#1; 1201139#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1201137#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1201135#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 1201132#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 1201133#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1209965#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 1212388#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1212380#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 1212363#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 1212352#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 1212351#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 1212324#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1129821#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 1129815#L1972-26 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1129808#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1129805#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1129802#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1129796#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1129788#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1129780#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1129771#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1129765#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 1129755#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1129737#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1129729#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1129706#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1129698#L756-2 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1129592#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1129575#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 1129572#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 1129569#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1129567#L752-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1129558#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1129553#L756-3 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1129552#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 1129549#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1129547#L1128-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1129545#isTopFloor_returnLabel#10 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 1129540#L1132-15 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 1129538#L1138-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1129537#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1129265#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1129264#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1129261#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1129257#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 1129258#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 1129250#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1129241#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1129236#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1129237#L3157-2 assume !false; 1129232#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1129233#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 1129228#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1129229#L3165 assume 1 != cleanup_~tmp___0~9#1; 1129224#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1129225#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1129220#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 1129221#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 1129214#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1129215#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 1129210#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1129208#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 1129204#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 1129200#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 1129195#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 1129196#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1129190#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1129191#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1129186#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1129187#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1164743#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1129181#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1129182#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1129093#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 1129094#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1194873#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1124966#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 1123827#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1123828#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1209267#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 1209262#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 1209260#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1209212#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 1209061#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1209028#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 1201299#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1194446#L1128-5 assume !(1 == ~currentHeading~0); 1201175#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1201173#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1201171#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1201167#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1201165#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1201164#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1201162#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1201160#L181-1 assume !(0 != ~floorButtons_spc2_1~0); 1185990#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1201158#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1201157#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1185986#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1201151#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1124211#L3157-2 [2024-10-15 00:47:14,717 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:14,717 INFO L85 PathProgramCache]: Analyzing trace with hash -1214915003, now seen corresponding path program 1 times [2024-10-15 00:47:14,717 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:14,718 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1095055045] [2024-10-15 00:47:14,718 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:14,718 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:14,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-15 00:47:14,735 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-15 00:47:14,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-15 00:47:14,784 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-15 00:47:14,785 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:14,785 INFO L85 PathProgramCache]: Analyzing trace with hash -474929631, now seen corresponding path program 1 times [2024-10-15 00:47:14,785 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:14,785 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [685391808] [2024-10-15 00:47:14,785 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:14,785 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:14,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:14,866 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 23 trivial. 0 not checked. [2024-10-15 00:47:14,866 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:14,866 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [685391808] [2024-10-15 00:47:14,866 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [685391808] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:14,866 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:14,866 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2024-10-15 00:47:14,867 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1757641071] [2024-10-15 00:47:14,867 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:14,867 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:14,868 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:14,868 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2024-10-15 00:47:14,868 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2024-10-15 00:47:14,868 INFO L87 Difference]: Start difference. First operand 109833 states and 199987 transitions. cyclomatic complexity: 90156 Second operand has 7 states, 7 states have (on average 12.571428571428571) internal successors, (88), 7 states have internal predecessors, (88), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:16,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:16,807 INFO L93 Difference]: Finished difference Result 218459 states and 396319 transitions. [2024-10-15 00:47:16,807 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 218459 states and 396319 transitions. [2024-10-15 00:47:18,633 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 209034 [2024-10-15 00:47:19,294 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 218459 states to 218459 states and 396319 transitions. [2024-10-15 00:47:19,294 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 218459 [2024-10-15 00:47:19,510 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 218459 [2024-10-15 00:47:19,510 INFO L73 IsDeterministic]: Start isDeterministic. Operand 218459 states and 396319 transitions. [2024-10-15 00:47:19,656 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2024-10-15 00:47:19,656 INFO L218 hiAutomatonCegarLoop]: Abstraction has 218459 states and 396319 transitions. [2024-10-15 00:47:19,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218459 states and 396319 transitions. [2024-10-15 00:47:21,914 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218459 to 217053. [2024-10-15 00:47:22,102 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 217053 states, 217053 states have (on average 1.8194311988316219) internal successors, (394913), 217052 states have internal predecessors, (394913), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:22,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 217053 states to 217053 states and 394913 transitions. [2024-10-15 00:47:22,526 INFO L240 hiAutomatonCegarLoop]: Abstraction has 217053 states and 394913 transitions. [2024-10-15 00:47:22,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2024-10-15 00:47:22,527 INFO L425 stractBuchiCegarLoop]: Abstraction has 217053 states and 394913 transitions. [2024-10-15 00:47:22,527 INFO L332 stractBuchiCegarLoop]: ======== Iteration 29 ============ [2024-10-15 00:47:22,527 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 217053 states and 394913 transitions. [2024-10-15 00:47:23,973 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 207676 [2024-10-15 00:47:23,973 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2024-10-15 00:47:23,974 INFO L119 BuchiIsEmpty]: Starting construction of run [2024-10-15 00:47:24,023 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:24,024 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2024-10-15 00:47:24,024 INFO L745 eck$LassoCheckResult]: Stem: 1450408#$Ultimate##0 assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int#1(91, 5, 0, 1);call write~init~int#1(95, 5, 1, 1);call write~init~int#1(93, 5, 2, 1);call write~init~int#1(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int#2(91, 6, 0, 1);call write~init~int#2(93, 6, 1, 1);call write~init~int#2(32, 6, 2, 1);call write~init~int#2(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int#3(32, 7, 0, 1);call write~init~int#3(97, 7, 1, 1);call write~init~int#3(116, 7, 2, 1);call write~init~int#3(32, 7, 3, 1);call write~init~int#3(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int#4(37, 8, 0, 1);call write~init~int#4(105, 8, 1, 1);call write~init~int#4(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int#5(117, 10, 0, 1);call write~init~int#5(112, 10, 1, 1);call write~init~int#5(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int#6(100, 11, 0, 1);call write~init~int#6(111, 11, 1, 1);call write~init~int#6(119, 11, 2, 1);call write~init~int#6(110, 11, 3, 1);call write~init~int#6(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int#7(32, 12, 0, 1);call write~init~int#7(73, 12, 1, 1);call write~init~int#7(76, 12, 2, 1);call write~init~int#7(95, 12, 3, 1);call write~init~int#7(112, 12, 4, 1);call write~init~int#7(58, 12, 5, 1);call write~init~int#7(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int#8(32, 13, 0, 1);call write~init~int#8(37, 13, 1, 1);call write~init~int#8(105, 13, 2, 1);call write~init~int#8(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int#9(32, 14, 0, 1);call write~init~int#9(37, 14, 1, 1);call write~init~int#9(105, 14, 2, 1);call write~init~int#9(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int#10(32, 15, 0, 1);call write~init~int#10(37, 15, 1, 1);call write~init~int#10(105, 15, 2, 1);call write~init~int#10(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int#11(32, 16, 0, 1);call write~init~int#11(37, 16, 1, 1);call write~init~int#11(105, 16, 2, 1);call write~init~int#11(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int#12(32, 17, 0, 1);call write~init~int#12(37, 17, 1, 1);call write~init~int#12(105, 17, 2, 1);call write~init~int#12(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int#13(32, 18, 0, 1);call write~init~int#13(70, 18, 1, 1);call write~init~int#13(95, 18, 2, 1);call write~init~int#13(112, 18, 3, 1);call write~init~int#13(58, 18, 4, 1);call write~init~int#13(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int#14(32, 19, 0, 1);call write~init~int#14(37, 19, 1, 1);call write~init~int#14(105, 19, 2, 1);call write~init~int#14(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int#15(32, 20, 0, 1);call write~init~int#15(37, 20, 1, 1);call write~init~int#15(105, 20, 2, 1);call write~init~int#15(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int#16(32, 21, 0, 1);call write~init~int#16(37, 21, 1, 1);call write~init~int#16(105, 21, 2, 1);call write~init~int#16(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int#17(32, 22, 0, 1);call write~init~int#17(37, 22, 1, 1);call write~init~int#17(105, 22, 2, 1);call write~init~int#17(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int#18(32, 23, 0, 1);call write~init~int#18(37, 23, 1, 1);call write~init~int#18(105, 23, 2, 1);call write~init~int#18(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int#19(10, 24, 0, 1);call write~init~int#19(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~head~0.base, ~head~0.offset := 0, 0; 1450409#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret125#1, main_~retValue_acc~25#1, main_~tmp~25#1;havoc main_~retValue_acc~25#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1451626#select_helpers_returnLabel#1 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1451122#select_features_returnLabel#1 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;havoc valid_product_~retValue_acc~1#1;valid_product_~retValue_acc~1#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~1#1; 1451123#valid_product_returnLabel#1 main_#t~ret125#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~1#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret125#1;havoc main_#t~ret125#1; 1450123#L3350 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1450124#setup_returnLabel#1 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline___utac_acc__Specification2_spec__1 } true;~floorButtons_spc2_0~0 := 0;~floorButtons_spc2_1~0 := 0;~floorButtons_spc2_2~0 := 0;~floorButtons_spc2_3~0 := 0;~floorButtons_spc2_4~0 := 0; 1450256#__utac_acc__Specification2_spec__1_returnLabel#1 assume { :end_inline___utac_acc__Specification2_spec__1 } true;assume { :begin_inline_test } true;assume { :begin_inline_bigMacCall } true;havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;havoc bigMacCall_~tmp~22#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 5;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~16#1; 1450257#L1810 assume !(0 == getOrigin_~person#1); 1452444#L1814 assume !(1 == getOrigin_~person#1); 1452549#L1818 assume !(2 == getOrigin_~person#1); 1450440#L1822 assume !(3 == getOrigin_~person#1); 1450441#L1826 assume !(4 == getOrigin_~person#1); 1452618#L1830 assume 5 == getOrigin_~person#1;getOrigin_~retValue_acc~16#1 := 1;getOrigin_#res#1 := getOrigin_~retValue_acc~16#1; 1450424#getOrigin_returnLabel#1 bigMacCall_#t~ret118#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~16#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bigMacCall_~tmp~22#1 := bigMacCall_#t~ret118#1;havoc bigMacCall_#t~ret118#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 5, bigMacCall_~tmp~22#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1450425#L2239 assume !(0 == initPersonOnFloor_~floor#1); 1450752#L2266 assume 1 == initPersonOnFloor_~floor#1; 1450753#L2267 assume !(0 == initPersonOnFloor_~person#1); 1451332#L2270 assume !(1 == initPersonOnFloor_~person#1); 1451333#L2273 assume !(2 == initPersonOnFloor_~person#1); 1450179#L2276 assume !(3 == initPersonOnFloor_~person#1); 1450180#L2279 assume !(4 == initPersonOnFloor_~person#1); 1451309#L2282 assume 5 == initPersonOnFloor_~person#1;~personOnFloor_5_1~0 := 1; 1450911#L2347-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1450912#L2031 assume !(0 == callOnFloor_~floorID#1); 1450819#L2034 assume 1 == callOnFloor_~floorID#1;~calls_1~0 := 1; 1450820#L2043-2 havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true; 1548486#initPersonOnFloor_returnLabel#1 havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true; 1548485#bigMacCall_returnLabel#1 havoc bigMacCall_#t~ret118#1, bigMacCall_~tmp~22#1;assume { :end_inline_bigMacCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret119#1, cleanup_#t~ret120#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~9#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~9#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1548484#L1968 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1548483#isFloorCalling_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1548482#L1161 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1548481#L565 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1548480#buttonForFloorIsPressed_returnLabel#1 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1548478#L1168 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1548477#stopRequestedAtCurrentFloor_returnLabel#1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1548475#L1309 assume !(0 != timeShift_~tmp___9~2#1); 1548476#L1400 assume 1 == ~doorState~0;~doorState~0 := 0; 1635606#L1400-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1635605#L752 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1635604#isTopFloor_returnLabel#1 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1635603#L756 assume !(0 != stopRequestedInDirection_~tmp~6#1); 1635602#L762 assume !(~currentFloorID~0 < 0); 1635601#$Ultimate##2214 assume !(~currentFloorID~0 < 0); 1635600#$Ultimate##2220 assume ~currentFloorID~0 < 1; 1635599#L792 assume 0 != stopRequestedInDirection_~respectFloorCalls#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1635598#L1968-2 assume !(0 == isFloorCalling_~floorID#1); 1635595#L1972-2 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1451220#isFloorCalling_returnLabel#3 stopRequestedInDirection_#t~ret22#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedInDirection_~tmp___3~2#1 := stopRequestedInDirection_#t~ret22#1;havoc stopRequestedInDirection_#t~ret22#1; 1450822#L796 assume 0 != stopRequestedInDirection_~tmp___3~2#1;stopRequestedInDirection_~retValue_acc~10#1 := 1;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1450823#stopRequestedInDirection_returnLabel#1 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1452690#L1408 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1451263#L1128 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1451264#isTopFloor_returnLabel#2 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 1451268#L1132 assume !(0 != continueInDirection_~tmp~7#1); 1452006#L1138-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1452007#L1144-1 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1450104#L1417-2 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1453351#getCurrentFloorID_returnLabel#1 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1451410#L165 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1451411#$Ultimate##2701 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1452188#L181 assume !(0 != ~floorButtons_spc2_1~0); 1543393#$Ultimate##2710 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1543394#$Ultimate##2719 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1543383#$Ultimate##2728 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1543381#L225 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1452559#timeShift_returnLabel#1 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1452560#L3157-2 [2024-10-15 00:47:24,025 INFO L747 eck$LassoCheckResult]: Loop: 1452560#L3157-2 assume !false; 1632294#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1632293#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 1632292#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1632290#L3165 assume 1 != cleanup_~tmp___0~9#1; 1632285#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1632283#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1632282#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 1535521#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 1535522#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1631714#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 1631711#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1631712#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 1631685#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 1552417#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 1631673#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 1631672#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1454461#L1968-26 assume !(0 == isFloorCalling_~floorID#1); 1454459#L1972-26 assume !(1 == isFloorCalling_~floorID#1); 1454457#L1976-26 assume 2 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_2~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1454455#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1454454#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1454449#L565-1 assume !(0 == buttonForFloorIsPressed_~floorID#1); 1454442#L569-1 assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1454440#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1454438#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1454436#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1454433#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 1454430#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1454427#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1454424#L752-2 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1454422#isTopFloor_returnLabel#6 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1454419#L756-2 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1454416#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1454414#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 1454410#L1183-2 assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~13#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 1454411#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1454222#L752-3 assume 1 == stopRequestedInDirection_~dir#1;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1454221#isTopFloor_returnLabel#8 stopRequestedInDirection_#t~ret20#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret20#1;havoc stopRequestedInDirection_#t~ret20#1; 1454217#L756-3 assume 0 != stopRequestedInDirection_~tmp~6#1;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1454216#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 1454213#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1454211#L1128-5 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~20#1;isTopFloor_~retValue_acc~20#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~20#1; 1454209#isTopFloor_returnLabel#10 continueInDirection_#t~ret31#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~20#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret31#1;havoc continueInDirection_#t~ret31#1; 1454204#L1132-15 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 1454202#L1138-17 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1454201#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1454199#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1454198#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1454197#L165-1 assume 0 == __utac_acc__Specification2_spec__3_~floor~0#1; 1454196#L166-1 assume 0 != ~floorButtons_spc2_0~0;assume { :begin_inline_areDoorsOpen } true;havoc areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;havoc areDoorsOpen_~retValue_acc~4#1;areDoorsOpen_~retValue_acc~4#1 := ~doorState~0;areDoorsOpen_#res#1 := areDoorsOpen_~retValue_acc~4#1; 1454195#areDoorsOpen_returnLabel#6 __utac_acc__Specification2_spec__3_#t~ret6#1 := areDoorsOpen_#res#1;havoc areDoorsOpen_~retValue_acc~4#1;assume { :end_inline_areDoorsOpen } true;__utac_acc__Specification2_spec__3_~tmp___4~0#1 := __utac_acc__Specification2_spec__3_#t~ret6#1;havoc __utac_acc__Specification2_spec__3_#t~ret6#1; 1453500#L170-2 assume 0 != __utac_acc__Specification2_spec__3_~tmp___4~0#1;~floorButtons_spc2_0~0 := 0; 1453466#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1453464#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1453462#L3157-2 assume !false; 1453460#L3158 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1453458#L3161 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;havoc isBlocked_~retValue_acc~2#1;isBlocked_~retValue_acc~2#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~2#1; 1453455#isBlocked_returnLabel#1 cleanup_#t~ret119#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~2#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~9#1 := cleanup_#t~ret119#1;havoc cleanup_#t~ret119#1; 1453456#L3165 assume 1 != cleanup_~tmp___0~9#1; 1485872#L3165-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;havoc isIdle_~retValue_acc~9#1;havoc isIdle_~tmp~5#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~8#1;havoc anyStopRequested_~tmp~4#1;havoc anyStopRequested_~tmp___0~1#1;havoc anyStopRequested_~tmp___1~1#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1453448#L1968-21 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1453445#isFloorCalling_returnLabel#22 anyStopRequested_#t~ret14#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret14#1;havoc anyStopRequested_#t~ret14#1; 1453446#L656 assume !(0 != anyStopRequested_~tmp___3~1#1); 1485867#L660 assume !(0 != ~floorButtons_0~0);assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 1;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1485866#L1968-22 assume !(0 == isFloorCalling_~floorID#1); 1485864#L1972-22 assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1453428#isFloorCalling_returnLabel#23 anyStopRequested_#t~ret15#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___2~1#1 := anyStopRequested_#t~ret15#1;havoc anyStopRequested_#t~ret15#1; 1453416#L667 assume 0 != anyStopRequested_~tmp___2~1#1;anyStopRequested_~retValue_acc~8#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~8#1; 1453417#anyStopRequested_returnLabel#1 isIdle_#t~ret19#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret14#1, anyStopRequested_#t~ret15#1, anyStopRequested_#t~ret16#1, anyStopRequested_#t~ret17#1, anyStopRequested_#t~ret18#1, anyStopRequested_~retValue_acc~8#1, anyStopRequested_~tmp~4#1, anyStopRequested_~tmp___0~1#1, anyStopRequested_~tmp___1~1#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~5#1 := isIdle_#t~ret19#1;havoc isIdle_#t~ret19#1;isIdle_~retValue_acc~9#1 := (if 0 == isIdle_~tmp~5#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~9#1; 1516836#isIdle_returnLabel#1 cleanup_#t~ret120#1 := isIdle_#res#1;havoc isIdle_#t~ret19#1, isIdle_~retValue_acc~9#1, isIdle_~tmp~5#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret120#1;havoc cleanup_#t~ret120#1; 1516834#L3177 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~10#1;havoc timeShift_~tmp___0~5#1;havoc timeShift_~tmp___1~4#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~8#1;havoc stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~18#1; 1516831#L1968-26 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~18#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~18#1; 1516829#isFloorCalling_returnLabel#27 stopRequestedAtCurrentFloor_#t~ret32#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~18#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor_~tmp___0~3#1 := stopRequestedAtCurrentFloor_#t~ret32#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1; 1516821#L1161-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~3#1);assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~5#1; 1516822#L565-1 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~5#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~5#1; 1516828#buttonForFloorIsPressed_returnLabel#2 stopRequestedAtCurrentFloor_#t~ret33#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~5#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;stopRequestedAtCurrentFloor_~tmp~8#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1; 1516823#L1168-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~8#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1516824#stopRequestedAtCurrentFloor_returnLabel#2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~8#1, stopRequestedAtCurrentFloor_~tmp___0~3#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1516808#L1309-2 assume !(0 != timeShift_~tmp___9~2#1); 1516809#L1400-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1631366#L1400-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1631355#L752-2 assume !(1 == stopRequestedInDirection_~dir#1); 1603830#L921-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1632665#stopRequestedInDirection_returnLabel#3 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1632664#L1408-2 assume !(0 != timeShift_~tmp___8~2#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~13#1; 1632662#L1183-2 assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~13#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~13#1; 1632663#getReverseHeading_returnLabel#3 timeShift_#t~ret54#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~13#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~2#1 := timeShift_#t~ret54#1;havoc timeShift_#t~ret54#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~2#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~10#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~tmp___1~2#1;havoc stopRequestedInDirection_~tmp___2~2#1;havoc stopRequestedInDirection_~tmp___3~2#1;havoc stopRequestedInDirection_~tmp___4~1#1;havoc stopRequestedInDirection_~tmp___5~0#1;havoc stopRequestedInDirection_~tmp___6~0#1;havoc stopRequestedInDirection_~tmp___7~0#1;havoc stopRequestedInDirection_~tmp___8~0#1;havoc stopRequestedInDirection_~tmp___9~0#1; 1632666#L752-3 assume !(1 == stopRequestedInDirection_~dir#1); 1632559#L921-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~10#1 := 0;stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~10#1; 1632553#stopRequestedInDirection_returnLabel#4 timeShift_#t~ret55#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret20#1, stopRequestedInDirection_#t~ret21#1, stopRequestedInDirection_#t~ret22#1, stopRequestedInDirection_#t~ret23#1, stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_#t~ret27#1, stopRequestedInDirection_#t~ret28#1, stopRequestedInDirection_#t~ret29#1, stopRequestedInDirection_#t~ret30#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~10#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~tmp___1~2#1, stopRequestedInDirection_~tmp___2~2#1, stopRequestedInDirection_~tmp___3~2#1, stopRequestedInDirection_~tmp___4~1#1, stopRequestedInDirection_~tmp___5~0#1, stopRequestedInDirection_~tmp___6~0#1, stopRequestedInDirection_~tmp___7~0#1, stopRequestedInDirection_~tmp___8~0#1, stopRequestedInDirection_~tmp___9~0#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~2#1 := timeShift_#t~ret55#1;havoc timeShift_#t~ret55#1; 1632550#L1417-3 assume !(0 != timeShift_~tmp___7~2#1);assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1603793#L1128-5 assume !(1 == ~currentHeading~0); 1632313#L1138-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1632312#L1138-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1632309#L1144-11 havoc continueInDirection_#t~ret31#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true; 1632306#L1417-5 assume { :begin_inline___utac_acc__Specification2_spec__3 } true;havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;havoc __utac_acc__Specification2_spec__3_~floor~0#1;havoc __utac_acc__Specification2_spec__3_~tmp~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___0~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___1~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___2~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___3~0#1;havoc __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;havoc getCurrentFloorID_~retValue_acc~3#1;getCurrentFloorID_~retValue_acc~3#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~3#1; 1632304#getCurrentFloorID_returnLabel#2 __utac_acc__Specification2_spec__3_#t~ret5#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~3#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification2_spec__3_~tmp~0#1 := __utac_acc__Specification2_spec__3_#t~ret5#1;havoc __utac_acc__Specification2_spec__3_#t~ret5#1;__utac_acc__Specification2_spec__3_~floor~0#1 := __utac_acc__Specification2_spec__3_~tmp~0#1; 1632301#L165-1 assume !(0 == __utac_acc__Specification2_spec__3_~floor~0#1); 1632300#$Ultimate##5385 assume 1 == __utac_acc__Specification2_spec__3_~floor~0#1; 1632298#L181-1 assume !(0 != ~floorButtons_spc2_1~0); 1508020#$Ultimate##5394 assume !(2 == __utac_acc__Specification2_spec__3_~floor~0#1); 1632297#$Ultimate##5403 assume !(3 == __utac_acc__Specification2_spec__3_~floor~0#1); 1632296#$Ultimate##5412 assume !(4 == __utac_acc__Specification2_spec__3_~floor~0#1); 1508017#L225-1 havoc __utac_acc__Specification2_spec__3_#t~ret5#1, __utac_acc__Specification2_spec__3_#t~ret6#1, __utac_acc__Specification2_spec__3_#t~ret7#1, __utac_acc__Specification2_spec__3_#t~ret8#1, __utac_acc__Specification2_spec__3_#t~ret9#1, __utac_acc__Specification2_spec__3_#t~ret10#1, __utac_acc__Specification2_spec__3_~floor~0#1, __utac_acc__Specification2_spec__3_~tmp~0#1, __utac_acc__Specification2_spec__3_~tmp___0~0#1, __utac_acc__Specification2_spec__3_~tmp___1~0#1, __utac_acc__Specification2_spec__3_~tmp___2~0#1, __utac_acc__Specification2_spec__3_~tmp___3~0#1, __utac_acc__Specification2_spec__3_~tmp___4~0#1;assume { :end_inline___utac_acc__Specification2_spec__3 } true; 1632295#timeShift_returnLabel#2 havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~10#1, timeShift_~tmp___0~5#1, timeShift_~tmp___1~4#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1452560#L3157-2 [2024-10-15 00:47:24,026 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:24,026 INFO L85 PathProgramCache]: Analyzing trace with hash -1214915003, now seen corresponding path program 2 times [2024-10-15 00:47:24,026 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:24,026 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2090915837] [2024-10-15 00:47:24,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:24,026 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:24,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-15 00:47:24,045 INFO L356 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2024-10-15 00:47:24,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2024-10-15 00:47:24,085 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2024-10-15 00:47:24,086 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2024-10-15 00:47:24,086 INFO L85 PathProgramCache]: Analyzing trace with hash -424471575, now seen corresponding path program 1 times [2024-10-15 00:47:24,086 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2024-10-15 00:47:24,086 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1007445543] [2024-10-15 00:47:24,086 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2024-10-15 00:47:24,086 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2024-10-15 00:47:24,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2024-10-15 00:47:24,167 INFO L134 CoverageAnalysis]: Checked inductivity of 43 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 22 trivial. 0 not checked. [2024-10-15 00:47:24,167 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2024-10-15 00:47:24,168 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1007445543] [2024-10-15 00:47:24,168 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1007445543] provided 1 perfect and 0 imperfect interpolant sequences [2024-10-15 00:47:24,168 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2024-10-15 00:47:24,169 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2024-10-15 00:47:24,169 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760695336] [2024-10-15 00:47:24,169 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2024-10-15 00:47:24,170 INFO L762 eck$LassoCheckResult]: loop already infeasible [2024-10-15 00:47:24,170 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2024-10-15 00:47:24,170 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2024-10-15 00:47:24,170 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2024-10-15 00:47:24,170 INFO L87 Difference]: Start difference. First operand 217053 states and 394913 transitions. cyclomatic complexity: 177862 Second operand has 5 states, 5 states have (on average 18.0) internal successors, (90), 5 states have internal predecessors, (90), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2024-10-15 00:47:26,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2024-10-15 00:47:26,454 INFO L93 Difference]: Finished difference Result 329243 states and 600951 transitions. [2024-10-15 00:47:26,454 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 329243 states and 600951 transitions.